Description
Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admin/backup_db.php or (2) modify configuration via a direct request to admin/options.php.
References
- webdirectorypro-url-security-bypass(30009) vdb-entry
- 8878 exploit
- 1859 third-party-advisory
- 35327 third-party-advisory
- 20061104 Web Directory Pro bypass Vulnerabilities mailing-list