VULNERABILITY INTELLIGENCE

CVE-2008-4183

CVSS score5 MEDIUM
EPSS probability3.23%
CISA KEVNot currently listed
Published2008-09-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references