CVE-2007-6603
Hot or Not Clone has insufficient access control for producing and reading database backups,...
CVE-2007-6603 is a medium vulnerability (CVSS 5.0) in Hotscripts Hot Or Not Clone, published December 31, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
Exploit likelihood
What each source reports
NVD Score used
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
- Record
CVE-2007-6603- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
- Record
CVE-2007-6603- Updated
- 2026-11-02
EUVDEUVD-2007-6569 No score
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
- Record
EUVD-2007-6569- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5344-399p-654f No score
Hot or Not Clone has insufficient access control for producing and reading database backups,...
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
- Record
GHSA-5344-399p-654f- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Hot or Not Clone by Jnshosts.com - Database Backup Dump | 2007-12-28 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |