[VulnWatch] php-Board (php)

• Previous message: @stake Advisories: "@stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Informations :
°°°°°°°°°°°°°°
Website : http://www.hp-planet.de
Version : 1
Problem : Informations disclosure


PHP Code/Location :
°°°°°°°°°°°°°°°°°°°
login.php :
-----------------------------------------
function passwd2($user)
{
$password="nicht registriert";
if (file_exists("user/".$user.".txt"))
{
$fp = fopen("user/".$user.".txt","r");
$data = fgetcsv($fp,10000,"#");
fclose($fp);
$password=$data[0];
}
return($password);
}
-----------------------------------------



Exploit :
°°°°°°°°°
http://[target]/user/[NICKNAME].txt



More details :
°°°°°°°°°°°°°°
In French :
http://www.frog-man.org/tutos/5holes8.txt

Translated by Google :
http://translate.google.com/translate?u=http%3A%2F%2Fwww.frog-man.org%2Ftutos%2F5holes8.txt&langpair=fr%7Cen&hl=fr&ie=ISO-8859-1&prev=%2Flanguage_tools





frog-m@n
http://www.phpsecure.org



_________________________________________________________________

• Next message: Frog Man: "[VulnWatch] DotBr (PHP)"
• Previous message: @stake Advisories: "@stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Feb 17 2003 - 02:43:28 PST