| Package | Affected versions | Patched versions |
|---|---|---|
| minidvblinux | ≤ 5.4 |
MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free