Description
BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain configuration and save files via direct requests.
References
- btsavemysql-url-file-disclosure(30760) vdb-entry
- 2002 third-party-advisory
- 20061206 BTSaveMySql 1.2 (acces to config files) mailing-list