Web Wiz Forums all version db stealing

From: Uziel aka nuJIurpuM (Uzielat_private)
Date: Thu Apr 17 2003 - 12:45:39 PDT

  • Next message: Mandrake Linux Security Team: "MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution"

    
     ('binary' encoding is not supported, stored as-is)
    .:: Decription ::.
    Web Wiz Forums, the free award winning ASP bulletin board system is 
    available in a boxed version with link removal code.
    
    .:: Vendor ::. 
    http://www.webwizguide.info
    
    .:: Problem ::.
    By default all passwords are kept on admin/wwforum.mdb
    Example: http://www.target.com/forum/admin/wwforum.mdb
    
     
    Best regards, Uziel
    



    This archive was generated by hypermail 2b30 : Thu Apr 17 2003 - 14:01:01 PDT