ASP-DEV Discussion Forum Admin Directory Weak Default Permissions Vulnerability
BID:8172
Info
ASP-DEV Discussion Forum Admin Directory Weak Default Permissions Vulnerability
| Bugtraq ID: | 8172 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2003 12:00AM |
| Updated: | Jul 13 2003 12:00AM |
| Credit: | Discovery credited to G00db0y. |
| Vulnerable: |
ASP-DEV Discussion Forum 2.0 |
| Not Vulnerable: | |
Exploit / POC
ASP-DEV Discussion Forum Admin Directory Weak Default Permissions Vulnerability
This vulnerability may be exploited with a web browser.
User credentials are stored in the sub-directory as follows:
http://www.example.com/forum/admin/
This vulnerability may be exploited with a web browser.
User credentials are stored in the sub-directory as follows:
http://www.example.com/forum/admin/
References
ASP-DEV Discussion Forum Admin Directory Weak Default Permissions Vulnerability
References:
References:
- Discussion Forum Homepage (ASP-DEV)
- ZH2003-4SA (security advisory): ASP-DEV Discussion Forum V2.0 (G00db0y
)