Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:18955
HistoryJan 27, 2008 - 12:00 a.m.

PhPress-0.3.0 Read All Sql Information For Config

2008-01-2700:00:00
vulners.com
16

Name : PhPress-0.3.0 Read All Sql Information For Config

Download From : http://phpress.org/

Or Direct Link : http://dfn.dl.sourceforge.net/sourceforge/phpress/PhPress-0.3.0.tar.gz

Discovred By : Hasadya Raed

E-mail : [email protected]

==================================================

Exploit :

After Installtion You See All Sql ( Username & Password ) Information For Config Here In This Link Like Here In Dir Users

http://localhost/phpress/users/admin/sql_phpress.php

You See In Page Like Here :

localhost root 000000

SQL Server : Localhost

SQL Username : root


By Hasadya Raed