CVE-2014-1637

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a…

published January 22, 2014

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a database backup via a direct request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06943 · 94.1th percentile
Published
2014-01-22T19:00Z
EPSS history
Timeline
  • 22 JAN 19:00Z
    Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a…
    cvelistv5