Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IntegraMOD Backup 目录信息泄露漏洞
Vulnerability Description
IntegraMOD 1.4.x在网根下储存敏感信息,但没有足够的访问权控制,远程攻击者可以通过向一个backup/backup-yyyy-dd-mm.sql文件名提交一个直接的请求来下载文件备份。
CVSS Information
N/A
Vulnerability Type
N/A