CVE-2013-1807: Medium severity PHP-Fusion php-fusion vulnerability
PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administration/dbbackups/.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1807?
CVE-2013-1807 has a moderate severity rating as it allows unauthorized access to sensitive backup files.
How do I fix CVE-2013-1807?
To fix CVE-2013-1807, upgrade PHP-Fusion to version 7.02.06 or later to ensure backup files are no longer accessible via direct requests.
What versions of PHP-Fusion are affected by CVE-2013-1807?
CVE-2013-1807 affects all PHP-Fusion versions prior to 7.02.06, including versions 7.02.01 to 7.02.05.
What kind of information can be exposed due to CVE-2013-1807?
Due to CVE-2013-1807, sensitive database backups may be exposed, potentially leaking user data.
Is there a workaround for CVE-2013-1807?
A valid workaround for CVE-2013-1807 is to move the backup files to a non-web-accessible directory until an upgrade can be performed.