| Título | code-projects Vehicle Management System In PHP With Source Code 1.0 Information Disclosure |
|---|
| Descrição | The Vehicle Management System in PHP is vulnerable to Sensitive Information Disclosure due to an SQL database file being located within a web-accessible application directory.
The affected file, vehicle_management.sql, is distributed as part of the application and is used to initialize the MySQL database during installation. When administrators deploy the complete Vehicle-Management directory directly under a web server document root, the SQL file remains alongside the publicly accessible PHP application files.
The vulnerable resource can be requested directly through the following application path:
/Vehicle-Management/vehicle_management.sql
If the web server does not explicitly prohibit access to .sql resources, an unauthenticated attacker can send a direct HTTP GET request for the file. The server may return the SQL dump as downloadable content or display its contents directly in the HTTP response.
No interaction with the application's normal authentication mechanism is necessary because the request targets the static SQL resource directly rather than an authenticated PHP endpoint.
Database dump files can contain highly valuable information about an application. Depending on the contents of vehicle_management.sql and subsequent modifications made by administrators, exposed information may include database schemas, table names, column definitions, application records, user information, administrative account information, password hashes or other authentication-related values, vehicle details, driver information, booking records, and internal relationships between database objects.
Even when an exposed SQL file contains only the application's initial database rather than current production data, disclosure of the complete database structure can provide an attacker with detailed knowledge of the application's internal implementation. This information may facilitate additional attacks by revealing table names, authentication structures, database relationships, and other implementation details.
The root cause is the insecure placement of a database initialization or backup file within a directory that can be served directly by the web server. The application distribution and deployment process should ensure that database files are either removed after installation or stored outside the document root.
Successful exploitation requires only the ability to send an HTTP request to the affected server. No authentication or user interaction is required if the SQL file is publicly accessible.
The vulnerability is classified as CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor and represents a security misconfiguration resulting from the exposure of sensitive database resources through the application's public web directory. |
|---|
| Fonte | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Vehicle%20Management%20System%20in%20PHP%20%E2%80%93%20Sensitive%20Information%20Disclosure%20via%20Exposed%20Database%20File.md |
|---|
| Utilizador | AhmadMarzook (UID 96211) |
|---|
| Submissão | 18/07/2026 19h43 (há 2 meses) |
|---|
| Moderação | 04/09/2026 07h58 (2 months later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 398681 [code-projects Vehicle Management System 1.0 SQL Database Backup File /vehicle_management.sql Divulgação de Informação] |
|---|
| Pontos | 20 |
|---|