[29368] in bugtraq
PHP Message Board/Guestbook
daemon@ATHENA.MIT.EDU (subj)
Tue Mar 18 19:35:01 2003
Date: 18 Mar 2003 00:45:08 -0000
Message-ID: <20030318004508.1947.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: subj <r2subj3ct@dwclan.org>
To: bugtraq@securityfocus.com
Product : PHP Message Board/Guestbook
Version : First
WebSite : http://www.cyber-cats.com/php
Problem : Viewing passwords file
Description:
------------
In this script passwords are in passwd.txt file
They are encrypted by DES algorithm.
In Shrot, all who want see the passwords can make it.
Exploit:
--------
http://[somehost]/[gb_dir]/files/passwd.txt
