medium5.0Public exploit code
CVE-2008-7056
BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery2008-08-21 · webapps · php · Verified
Impact
BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grayscalecms | Bandsite Cms | Version 1.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21992
- http://www.securityfocus.com/bid/30788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44588
- https://www.exploit-db.com/exploits/6286
- http://secunia.com/advisories/21992
- http://www.securityfocus.com/bid/30788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44588
- https://www.exploit-db.com/exploits/6286