VulnerabilityModified
CVE-2008-7080
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
MEDIUM 5.0EPSS 7.59%
Does this matter?
Lower severity and a low EPSS score (7.59%). Track it; it rarely justifies an emergency change on its own.
Description
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 7.59% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- phpclassifiedsscript/php classifieds script
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32776Vendor Advisory
- http://www.osvdb.org/50153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46803
- https://www.exploit-db.com/exploits/7206
- http://secunia.com/advisories/32776Vendor Advisory
- http://www.osvdb.org/50153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46803
- https://www.exploit-db.com/exploits/7206
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.