Bugtraq mailing list archives

PHP Message Board/Guestbook


From: subj <r2subj3ct () dwclan org>
Date: 18 Mar 2003 00:45:08 -0000



Product : PHP Message Board/Guestbook
Version : First
WebSite : http://www.cyber-cats.com/php
Problem : Viewing passwords file

Description:
------------

In this script passwords are in passwd.txt file
They are encrypted by DES algorithm.
In Shrot, all who want see the passwords can make it.

Exploit:
--------

http://[somehost]/[gb_dir]/files/passwd.txt


Current thread: