Required CVE Record Information
Description
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information.
References 3 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- exchange.xforce.ibmcloud.com: blogpixelmotion-sauvbase-info-disclosure(41671) vdb-entryx_transferred
- vupen.com: ADV-2008-1121 vdb-entryx_transferred
- exploit-db.com: 5380 exploitx_transferred