| 제목 | code-projects Daily Expense Manager in PHP 1.0 Information Disclosure |
|---|
| 설명 | The Daily Expense Manager in PHP contains a potential Sensitive Information Disclosure vulnerability due to the insecure placement of the exp_ak.sql database initialization file within the application's web directory.
The SQL file is distributed as part of the application and is used to create and initialize the application's MySQL database. The vendor's documented installation process instructs administrators to copy the main project directory into the XAMPP htdocs directory and subsequently import the exp_ak.sql file located inside the Daily-Expense-Manager folder.
As a consequence, following the documented deployment procedure may leave the SQL file inside the web server's document root.
The affected resource is:
/Daily-Expense-Manager/exp_ak.sql
If the web server is configured to serve .sql files as static resources and no additional access restrictions are implemented, an unauthenticated user can request the file directly through HTTP.
The vulnerability does not require interaction with an authenticated application endpoint. Instead, the attacker accesses the static database resource directly using its predictable URL.
Depending on the contents of the deployed SQL file, successful exploitation could disclose the application's complete database schema and any records contained in the database dump. Potentially exposed information may include income records, expense information, financial transaction details, database table and column names, and other application data present in the SQL file.
Even if the distributed exp_ak.sql file contains only initial or sample data rather than current production information, exposing the complete database schema provides an attacker with detailed knowledge of the application's backend structure. This information can assist in identifying table names, column names, relationships, and application data structures that may facilitate additional attacks.
The root cause is the placement of a sensitive database initialization file inside a publicly accessible application directory combined with the absence of web-server restrictions preventing direct access to SQL resources.
If direct HTTP retrieval of exp_ak.sql is confirmed, exploitation requires no authentication, privileges, or user interaction. |
|---|
| 원천 | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Daily%20Expense%20Manager%20in%20PHP%20%E2%80%93%20Sensitive%20Information%20Disclosure%20via%20Exposed%20SQL%20Database%20File.md |
|---|
| 사용자 | AhmadMarzook (UID 96211) |
|---|
| 제출 | 2026. 07. 19. PM 07:53 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 05. PM 12:42 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 399311 [code-projects Daily Expense Manager 1.0 Database Backup exp_ak.sql 정보 공개] |
|---|
| 포인트들 | 20 |
|---|