Description
Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql.
References
- http://acid-root.new.fr/poc/15061124.txt
- 1961 third-party-advisory
- ADV-2006-4701 vdb-entry
- 23122 third-party-advisory
- 20061124 Cahier de texte V2.0 SQL Code Execution Exploit mailing-list
- 21283 vdb-entry