Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kailash Nadh boastMachine 敏感信息泄露漏洞
Vulnerability Description
Kailash Nadh boastMachine(以前的bMachine)3.1及之前版本中的Backup选择使用可预测的文件名进行数据库备份，并将文件储存在没有充分的访问控制的web根目录下，可以使远程攻击者通过下载备份文件获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A