Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2007-6603 (Hot_or_Not_Clone)

BugsAlert Home > CVE-2007-6603 (Hot_or_Not_Clone)
 
 

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the adminstrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6603

Learn more about CVE-2007-6603 (Hot_or_Not_Clone)
 
Tags: cve-2007-6603 hot clone

Related Items

      Umer Inc. Songs Portal "id" SQL Injection Vulnerability

      FrSIRT - Mandriva Security Update Fixes Exiv2 Denial of Service Vulnerability

      FrSIRT - Private Messaging Component for Limbo SQL Injection Vulnerability

      Zero-Day Exploits Target Microsoft Jet Flaw

      TYPO3 powermail Extension Cross-Site Scripting Vulnerability

      CVE-2008-2127 (CMS Faethon)

      GroupWise 7.0 mailto: scheme buffer overflow

 

Pixel