CVE-2013-1807

published 2014-04-30

CVE-2013-1807: PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote…

Priority P3 34 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EXPLOIT

PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administration/db_backups/.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
php-fusion	php-fusion	<= 7.02.05	—
php-fusion	php-fusion	—	—
php-fusion	php-fusion	—	—
php-fusion	php-fusion	—	—
php-fusion	php-fusion	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264