Security Advisory
CVE-2008-6199
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via a direct request to backup.php, which creates backup.sql under the web root with insufficient access control.