Backup or database dump public
Scan rule · RSC-SEC-022
- Security
- Severity: Critical
- CWE-530
Probes typical dump/backup paths and confirms hits via SQL or archive signatures.
Scan tier
- Active (after domain proof)
How to fix it
Remove the files from the web root and store backups outside the deployment.