| शीर्षक | code-projects Online Application System For Admission In PHP 1.0 Information Disclosure |
|---|
| विवरण | The Online Application System for Admission in PHP v1.0 is affected by a Sensitive Information Disclosure vulnerability due to an exposed SQL database backup file.
The application stores a database dump file (oas.sql) inside a publicly accessible directory within the web root. Because the web server does not restrict access to .sql files, any remote user can directly access and download the database dump without authentication.
The exposed file can be accessed via:
http://localhost/OnlineApplicationSystem_PHP/enrollment/database/oas.sql
Since the SQL file contains the complete database structure and stored application data, an attacker can retrieve sensitive information including user records, credentials, application data, and database schema.
This vulnerability arises from improper server configuration and insecure storage of backup files inside web-accessible directories. |
|---|
| स्रोत | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Application%20System%20for%20Admission%20PHP%20Exposed%20Database%20Backup.md |
|---|
| उपयोगकर्ता | AhmadMarzouk (UID 95993) |
|---|
| सबमिशन | 23/03/2026 06:08 PM (6 महीनों पहले) |
|---|
| संयम | 05/04/2026 10:46 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 355438 [code-projects Online Application System for Admission 1.0 oas.sql सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|