HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db.Referenceshttp://osvdb.org/48282http://packetstorm.linuxsecurity.com/0809-exploits/webhost-database.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/45241http://secunia.com/advisories/31922http://www.securityfocus.com/bid/31249