| शीर्षक | code-projects Movie Ticketing System in PHP 1.0 Information Disclosure |
|---|
| विवरण | The Movie Ticketing System in PHP v1.0 is vulnerable to Sensitive Information Disclosure due to an exposed SQL database backup file.
The application stores a database dump file (moviedb.sql) inside a publicly accessible directory within the web root. Because the web server does not restrict access to .sql files, any remote attacker can directly access and download the database dump without authentication.
The exposed file can be accessed at:
http://localhost/movie/db/moviedb.sql
The SQL dump file contains the full database structure and stored application data. Since this application is built using PHP and MySQL, it stores sensitive operational data such as user accounts, booking information, and administrative credentials in the database.
Because the file is publicly accessible, an attacker can retrieve sensitive information directly through the browser without any authentication.
|
|---|
| स्रोत | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Movie%20Ticketing%20System%20PHP%20Exposed%20Database%20Backup.md |
|---|
| उपयोगकर्ता | AhmadMarzook (UID 96211) |
|---|
| सबमिशन | 26/03/2026 06:12 PM (6 महीनों पहले) |
|---|
| संयम | 08/04/2026 09:07 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 356373 [code-projects Movie Ticketing System 1.0 SQL Database Backup File /db/moviedb.sql सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|