This is a writeup describing an information disclosure vulnerability in Newsletter Tailor, allowing unauthenticated access to database backups via direct URLs. No exploit code is provided, only URLs demonstrating the issue.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:Newsletter Tailor (version unspecified)
No auth needed
Prerequisites:Target must have Newsletter Tailor installed with exposed admin/download directory