Bugtraq mailing list archives

lblog Remote Password Disclosure

From: Advisory () aria-security net
Date: 2 Jan 2007 05:30:55 -0000

#<Aria-Security Team>
#<Happy New Year!!>
#<Aria-Security.com For English>
#<Aria-Security.net For Parsi>
#Discovered: Aria-Security Team
#Vendor: http://www.lblog.dk/
#Risk: Low
#Type:Remote Database Download
#PoC:
#
#http://TARGET/path/admin/db/newFolder/                              THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER
#
#Contact: advisory () aria-security net

Current thread:

lblog Remote Password Disclosure Advisory (Jan 02)