gmdarkfiggmail.com
Date: Mon Jul 03 2006 - 02:42:29 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

#
# Title: 5 php scripts remote database password disclosure
# Date: Sun July 02 21:04 2006
# Credits: Security hole discovered by DarkFig (gmdarkfiggmail.com)
# Problem: Database configuration is located in a .inc file(no protected by .htaccess file)
# Web: http://acid-root.new.fr
#

# VulnScr: Mp3netbox Beta 1
# Author: flymoonusers.sourceforge.net
# Download: http://sourceforge.net/projects/mp3netbox
# Exploit: http://[...]/config.inc

# VulnScr: efone <= 20000723
# Author: brushusers.sourceforge.net
# Download: http://sourceforge.net/projects/efone
# Exploit: http://[...]/config.inc

# VulnScr: Kamikaze-QSCM <= v0.1
# Author: ???????.???
# Download: http://kamikaze-qscm.tigris.org/
# Exploit: http://[...]/config.inc

# VulnScr: Blueboy <= 1.0.3
# Author: manousers.sourceforge.net
# Download: http://sourceforge.net/projects/bb-news
# Exploit: http://[...]/bb_news_config.inc

# VulnScr: Foros V.1.0
# Author: euplausers.sourceforge.net
# Download: http://sourceforge.net/project/showfiles.php?group_id=14333&package_id=51342
# Exploit: http://[...]/inc/config.inc

#EOF

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]