CVE-2008-4183 | BDVDB-2026-32506 Detail

Description#

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.integramod.com/forum/viewtopic.php?f=3&t=5089
http://www.securityfocus.com/bid/31149
http://securityreason.com/securityalert/4300
https://www.exploit-db.com/exploits/6390
https://exchange.xforce.ibmcloud.com/vulnerabilities/45096
http://secunia.com/advisories/31749

Exploit#

https://www.exploit-db.com/exploits/6390

History#

Version 12008-09-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.