HyperStop WebHost Directory Database Disclosure Vulnerability

Bugtraq ID:	31249
Class:	Design Error
CVE:	CVE-2008-7008
Remote:	Yes
Local:	No
Published:	Sep 19 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	r45c4l
Vulnerable:	HyperStop WebHost Directory 1.2
Not Vulnerable:

HyperStop WebHost Directory Database Disclosure Vulnerability

HyperStop WebHost Directory is reported prone to an information-disclosure vulnerability.

Successful exploits of this issue may allow an attacker to obtain sensitive information by downloading the full contents of the application's database.

HyperStop WebHost Directory 1.2 is vulnerable; other versions may also be affected.

HyperStop WebHost Directory Database Disclosure Vulnerability

Attackers can exploit the issue through a browser.

The following example URI is available:

http://www.example.com/admin/backup/db

HyperStop WebHost Directory Database Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HyperStop WebHost Directory Database Disclosure Vulnerability

References:

• WebHost Directory Homepage (HyperStop)