CVE-2025-63891
Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.
Vendor
Product
CWE
Yayın Tarihi
2025-11-14 21:15:45
Güncelleme
2025-11-19 18:55:50
Source Identifier
cve@mitre.org
KEV Date Added
-