ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/11437 | Exploit |
Configurations
Information
Published : 2010-02-22 13:30
Updated : 2010-02-23 09:14
NVD link : CVE-2010-0681
Mitre link : CVE-2010-0681
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
zeuscms
- zeuscms