lblog Remote Password Disclosure Jan 02 2007 05:30AM
Advisory aria-security net
#<Aria-Security Team>
#<Happy New Year!!>
#<Aria-Security.com For English>
#<Aria-Security.net For Parsi>
#Discovered: Aria-Security Team
#Vendor: http://www.lblog.dk/
#Risk: Low
#Type:Remote Database Download
#PoC:
#
#http://TARGET/path/admin/db/newFolder/ THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER
#
#Contact: advisory (at) aria-security (dot) net [email concealed]

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus