| tiêu đề | code-projects.org Login Registration System In PHP 1.0 Information Disclosure |
|---|
| Mô tả | A vulnerability was found in Login Registration System 1.0 on code-projects.org. The affected resource is /loginsystem/database/login_registration_system.sql of the component Database Backup Directory. Due to exposed directory listing, an unauthenticated attacker can directly access and download the SQL dump without authentication. The manipulation leads to information disclosure. The attack may be initiated remotely. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) / CWE-548 (Exposure of Information Through Directory Listing). CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High). Vendor contacted via email. No response received. |
|---|
| Nguồn | ⚠️ https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Login-Registration-System-login_registration_system.sql-Sensitive-Database-Disclosure.md |
|---|
| Người dùng | anubhav106 (UID 98769) |
|---|
| Đệ trình | 04/07/2026 12:06 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 19/08/2026 21:21 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 393314 [code-projects Login Registration System 1.0 SQL Database Backup login_registration_system.sql nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|