Select a system backup to download?????? Giant security flaw?

jols

Well-Known Member
Mar 13, 2004
1,107
3
168
I notice that this is in every hosted accounts cPanel via the Backup link. Below the buttons appear Daily and Weekly.

Much to my surprise just now, when I accessed a personal account, the file named weekly.tar.gz is starting to download.

Question - Is this the tar file for the entire server, i.e. for every account in the /backup/cpbackup/weekly directory????

Does cPanel allow an individual account user to actually do this?
 

jols

Well-Known Member
Mar 13, 2004
1,107
3
168
Nevermind -

Nevermind, I answered my own silly question.

No, it just backes up the individual account that it is called from. Sorry about that.
 

HelloAdam

Well-Known Member
Nov 6, 2005
145
0
166
I notice that this is in every hosted accounts cPanel via the Backup link. Below the buttons appear Daily and Weekly.

Much to my surprise just now, when I accessed a personal account, the file named weekly.tar.gz is starting to download.

Question - Is this the tar file for the entire server, i.e. for every account in the /backup/cpbackup/weekly directory????

Does cPanel allow an individual account user to actually do this?
Nevermind, I answered my own silly question.

No, it just backes up the individual account that it is called from. Sorry about that.
Correct.....

From,
Adam