Vulnerability Development mailing list archives

rodopi security problem??


From: Rekaerf34 () AOL COM (Matthew Dunham)
Date: Tue, 18 Jul 2000 01:52:44 EDT


Hello, I do not know how many people are familiar with rodopi but it is a isp
database program. I use this program and as I got bored tonight i decided to
just test a little to see what i could do to try to hack my way in and found
that i could go to http://not~real~isp.gov/:8181olsplus/rodopi.html (for
security reasons i'm not going to reveal my page :) but if i went to the
accounting links from rodopi.html it asked me for a password so i could not
go any further. I was wanting to know is if you could do an Input Validation
Attack to go to the other links or if their was anything else that i might
need to know about rodopi and it's security.
thanks


---
heaven must be running unix, how else do u explain so much uptime?



Current thread: