medium5.0Public exploit code
CVE-2010-0681
ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZeusCMS 0.2 - Database Backup Dump / Local File Inclusion2010-02-13 · webapps · php · Verified
Impact
ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zeuscms | Zeuscms | Version 0.2 |