Every CVESearch/Get API key

CVE-2008-7080

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient...

5.0 MediumPublic exploit

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.

Exploit likelihood

7.59%Up 3.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.

Record
CVE-2008-7080
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.

Record
CVE-2008-7080
Updated
2026-11-02
EUVDEUVD-2008-7039No score

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.

Record
EUVD-2008-7039
Updated
2026-11-03
GitHub AdvisoriesGHSA-43r2-j3m4-vcpcNo score

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient...

Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.

Record
GHSA-43r2-j3m4-vcpc
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP Classifieds Script - Remote Database Disclosure2008-11-23

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-7080 is a medium vulnerability (CVSS 5.0) in Phpclassifiedsscript Php Classifieds Script, published August 25, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.59%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open