cve/2013/CVE-2013-1807.md
2024-06-18 02:51:15 +02:00

778 B

CVE-2013-1807

Description

PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administration/db_backups/.

POC

Reference

Github

No PoCs found on GitHub currently.