Bugtraq mailing list archives
PHPBlogger cookie privilege escalation
From: darthballsbr () hotmail com
Date: 28 Jul 2007 11:03:24 -0000
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db =] -------------------------------------------- The admin panel is acessible once you have a cookie named "key" with the encrypted password So, its possible to administrate remote blogs just by searching for a exposed pref.db and creating a cookie for the page with the encrypted password for more detailes (pt-BR) http://forcehacker.com/forum/viewtopic.php?t=2352 by darthballs
Current thread:
- PHPBlogger cookie privilege escalation darthballsbr (Jul 28)