bugtraq - Web Wiz Site News realease v3.06 administration access.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <000001c30288$6d2cb480$8c80763e@user1>
Date: Mon, 14 Apr 2003 17:19:03 +0400
From: "drG4njubas" <drG4nj@...l.ru>
To: <bugtraq@...urityfocus.com>
Subject: Web Wiz Site News realease v3.06 administration access.

Date:
14.04.2003

Subject:
Web Wiz Site News realease v3.06 administration access.

Description:
Free asp news management system. Includes, simple intergration, 
short news item with link to full story, insert images, links, 
text formatting, user comments(optional) with email notification, 
anti-spam settings, and more 

Vendor:
Web Wiz Guide
http://www.webwizguide.info/

Vulnerability:
Administrator's password is not encrypted. It is
placed in MS Acess database. An attaker may download 
it and gain administrators privilegies.
Example: http://www.target.com/news/news.mdb

Black Tigerz Research Group
We are:Areus,Barracuda,n1Tr0f4n,Velzevol,n3ch,drG4njubas.
Please visit our website: http://www.blacktigerz.org