Erolife AjxGaleri VT Database Disclosure Vulnerability

2010.03.25

Credit: LionTurk

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2010-1064

CWE: CWE-264

Ogólna skala CVSS: 5/10

Znaczenie: 2.9/10

Łatwość wykorzystania: 10/10

Wymagany dostęp: Zdalny

Złożoność ataku: Niska

Autoryzacja: Nie wymagana

Wpływ na poufność: Częściowy

Wpływ na integralność: Brak

Wpływ na dostępność: Brak

==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
/_/ \_\ |_____| |_____| /_/ \_\ |_| |_|
==============================================================================
[&#187;] ~ Note : Mutlu Yillar Millettt
==============================================================================
[&#187;] Erolife AjxGaleri VT Database Disclosure Vulnerability
==============================================================================
[&#187;] Script: [ Erolife AjxGaleri VT ]
[&#187;] Language: [ ASP ]
[&#187;] Download: [ http://www.aspindir.com/goster/4322]
[&#187;] Founder: [ LionTurk - Bylionturk@kafam1milyon.com - LionTurk.Turkblog.com }
[&#187;] My Home: [ RevengeHack.com & Ar-ge.Org ]
[&#187;]N0T3 : Yeni Aciklarimi Bekleyin.
###########################################################################
===[ Exploit And Dork ]===
[&#187;] http://revengehack.com/[dizin]/db/ajxgaleri.mdb
[&#187;] Erolife AjxGaleri VT
Author: LionTurk <-
Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng
- Turk'uz Varmi Otesi?
###########################################################################

Referencje:

http://xforce.iss.net/xforce/xfdb/55446

http://www.exploit-db.com/exploits/11023

http://secunia.com/advisories/38033

http://packetstormsecurity.org/1001-exploits/erolife-disclose.txt

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Erolife AjxGaleri VT Database Disclosure Vulnerability

Referencje:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.