BugTraq
PHP MySQL Banner Exchange 2.2.1 remote mysql database bug Dec 14 2007 08:42AM
arsalan1991 gmail com
Discovered by Arsalan kashan

email=arsalan1991 (at) gmail (dot) com [email concealed]

portal=PHP MySQL Banner Exchange

download=http://sourceforge.net/projects/banex

version=2.2.1

bug:

its store the mysql database setting in a .inc file and you can easily read it as a anonymous user

/script_path/inc/lib.inc

the you can connect to mysql database

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus