Skip to content
OpenAdvisories

Weakness (CWE)

CWE-530: Exposure of Backup File to an Unauthorized Control Sphere

Variant Incomplete

A backup file is stored in a directory or archive that is made accessible to unauthorized actors.

How to prevent it (1 mitigation)

  1. Policy

    Recommendations include implementing a security policy within your organization that prohibits backing up web application source code in the webroot.

Source: MITRE CWE-530

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2014-125136

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory. Unauthenticated attackers can list the…

    C97net Kemana Directory qEngine CMS Cart Engine