CVE-2008-7080
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient...
CVE-2008-7080 is a medium vulnerability (CVSS 5.0) in Phpclassifiedsscript Php Classifieds Script, published August 25, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.59%, the 94th percentile. No source names a fixed version.
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
Exploit likelihood
What each source reports
NVD Score used
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
- Record
CVE-2008-7080- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
- Record
CVE-2008-7080- Updated
- 2026-11-02
EUVDEUVD-2008-7039 No score
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
- Record
EUVD-2008-7039- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-43r2-j3m4-vcpc No score
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient...
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
- Record
GHSA-43r2-j3m4-vcpc- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP Classifieds Script - Remote Database Disclosure | 2008-11-23 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |