Bugtraq mailing list archives

Uploadscript Vulnerabilities: Text file Hash password


From: hack2prison () yahoo com
Date: 6 Dec 2006 08:28:11 -0000

I don't know anyone report this:
Uploadscript is great script for share file. It is like rapidshare.com

I detect that admin password is stored in txt file and anyone can get it.

Infect: v1.0 - v1.1 - v1.2 and maybe lower.

Search google keyword: Powered by Uploadscript v1.0

Exploit: http://target/path/password.txt


Current thread: