medium5.0Public exploit code
CVE-2008-6815
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct requ…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyKtools 2.4 - Arbitrary Database Backup2008-10-27 · webapps · php · Verified
Impact
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myktools | Myktools | Version 2.4 |