Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

HyperStop Web Host Directory 1.2 lets attackers download database backup

CVE-2008-7008 · published 17 years ago
Summary

The Web Host Directory version 1.2 lets anyone on the network request a file that contains a full copy of the stored data without needing to log in. This could expose confidential information to unauthorized parties. Apply the vendor’s update or restrict access to the admin/backup/db path until a fix is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hyperstop web_host_directory 1.2
cpe:2.3:a:hyperstop:web_host_directory:1.2:*:*:*:*:*:*:*
Original advisory text
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db.
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Type
CWE-287Improper Authentication
Timeline
Published19 Aug 2009
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-7008 · NVD
Track software like this
Free during beta