Bugtraq mailing list archives

PhPress-0.3.0 Read All Sql Information For Config


From: r2t () hotmail it
Date: 26 Jan 2008 10:04:45 -0000

# Name : PhPress-0.3.0  Read All Sql Information For Config

# Download From : http://phpress.org/

Or Direct Link : http://dfn.dl.sourceforge.net/sourceforge/phpress/PhPress-0.3.0.tar.gz

# Discovred By : Hasadya Raed
# E-mail       : r2t () hotmail com

==================================================

# Exploit :

After Installtion You See All Sql ( Username & Password ) Information For Config Here In This Link Like Here In Dir 
Users

http://localhost/phpress/users/admin/sql_phpress.php

You See In Page Like Here :

localhost root 000000 

SQL Server : Localhost

SQL Username : root

_______________
By Hasadya Raed


Current thread: