bugtraq - GuppY v4.0 remote del files/index

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: 11 Mar 2007 23:58:39 -0000
From: sn0oPy.team@...il.com
To: bugtraq@...urityfocus.com
Subject: GuppY v4.0 remote del files/index

* GuppY v4.0 remote del files/index

* By : sn0oPy

* Risk : high

* site :  http://www.freeguppy.org/

* Dork : inurl:"/guppy/index.php"

* exploit :

         just add install/install.php to the script folder
         http://www.target.ma/guppy/install/install.php
         choose "Installation propre" >>> next >>> choose "Suppression des fichiers d'installation"  >>> next >>>
                    

* contact : sn0oPy@...nir-geopolitique.net

* greetz : [subzero], Avg Team(forums.avenir-geopolitique.net).

* Reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2728