Cyb3r-1sT has reported a security issue in Team PHP PHP Classifieds Script, which can be exploited by malicious people to disclose sensitive information.

The security issue is caused due to database backup admin/backup/datadump.sql being stored with insecure permissions inside the web root. This can be exploited to gain knowledge of potentially sensitive information by downloading the file.

Solution
Restrict access to the database backup file.

Provided and/or discovered by
Cyb3r-1sT

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/7206

Deep Links
Links available in Customer Area