Threats tagged 'ghsa-57x3-245r-wqp6'

An information disclosure vulnerability exists in the SourceCodester Simple Online Book Store System due to a web-accessible backup file. A remote unauthenticated attacker can retrieve the full database contents, including schema and credential hashes, via an HTTP GET request to /obs/database/obs_db.sql. This vulnerability allows unauthorized access to sensitive data without requiring authentication.