The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Aztek_forum |
Aztek_forum |
4.0 (including) |
4.0 (including) |
References