admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication which allows remote attackers to trigger a database backup dump and obtain the resulting blogPM.sql file that contains sensitive information.