• info
• discussion
• exploit
• solution
• references

Mini SQL w3-msql Vulnerability

First Approach:
This attack requires the attacker to know the location/directory structure of the site she is attacking.

http://www.victim.org/cgi-bin/w3-msql/protected-directory/private-file

Second Approach:
This approach will gain the intruder a DES encrypted password which they can then attempt to crack it via any number of popular cracking utilites.

http://www.victim.org/cgi-bin/w3-msql/protected-directory/.htpasswd