Vulnerability in 2532gigs

CVE-2008-6199

2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via a direct request to backup.php, which creates backup.sql under the web root with insufficient access control.

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

Affected products

  • 2532gigs — versions 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References