CVE-2007-6603: Hotscripts Hot Or Not Clone

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.

Affected products

• Hotscripts Hot Or Not Clone: any version

Published 2007-12-31. Last modified 2026-06-16.