CVE-2008-6815 Information

Description

mykdownload.php in MyKtools 2.4 does not require administrative authentication which allows remote attackers to read a database backup by making a direct request and then sending an unspecified request to the download page for the backup.

Reference

http://www.securityfocus.com/bid/31950 https://exchange.xforce.ibmcloud.com/vulnerabilities/46145 https://www.exploit-db.com/exploits/6855