bugtraq - lblog Remote Password Disclosure

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [month] [year] [list]

Date: 2 Jan 2007 05:30:55 -0000
From: Advisory@...a-security.net
To: bugtraq@...urityfocus.com
Subject: lblog Remote Password Disclosure

#<Aria-Security Team>
#<Happy New Year!!>
#<Aria-Security.com For English>
#<Aria-Security.net For Parsi>
#Discovered: Aria-Security Team
#Vendor: http://www.lblog.dk/
#Risk: Low
#Type:Remote Database Download
#PoC:
#
#http://TARGET/path/admin/db/newFolder/                              THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER
#
#Contact: advisory@...a-security.net