The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Aztek_forum | Aztek_forum | 4.0 (including) | 4.0 (including) |
References