CVE-2013-1807

CVE-2013-1807 describes a vulnerability in PHP-Fusion versions prior to 7.02.06, where backup files are stored with predictable filenames in an unrestricted web-accessible directory. This allows unauthenticated remote attackers to obtain sensitive information by directly requesting these backup files. The vulnerability has a CVSS score of 5.0, indicating a medium severity due to its low attack complexity and potential for partial confidentiality impact. While not listed in CISA's KEV catalog, exploit code for multiple vulnerabilities in PHP-Fusion 7.02.05, including this one, is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.