CVE-2008-0249

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in…

published January 12, 2008

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails. NOTE: this might only be an issue in limited environments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02587 · 85.1th percentile
Published
2008-01-12T02:00Z
EPSS history
Timeline
  • 12 JAN 02:00Z
    PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in…
    cvelistv5