5 php scripts remote database password disclosure

From: <gmdarkfig_at_gmail.com>
Date: 3 Jul 2006 07:42:29 -0000

('binary' encoding is not supported, stored as-is) #
# Title: 5 php scripts remote database password disclosure
# Date: Sun July 02 21:04 2006
# Credits: Security hole discovered by DarkFig (gmdarkfig_at_gmail.com)
# Problem: Database configuration is located in a .inc file(no protected by .htaccess file)
# Web: http://acid-root.new.fr
#

# VulnScr: Mp3netbox Beta 1
# Author: flymoon_at_users.sourceforge.net
# Download: http://sourceforge.net/projects/mp3netbox
# Exploit: http://[...]/config.inc

# VulnScr: efone <= 20000723
# Author: brush_at_users.sourceforge.net
# Download: http://sourceforge.net/projects/efone
# Exploit: http://[...]/config.inc

# VulnScr: Kamikaze-QSCM <= v0.1
# Author: ???@????.???
# Download: http://kamikaze-qscm.tigris.org/
# Exploit: http://[...]/config.inc

# VulnScr: Blueboy <= 1.0.3
# Author: mano_at_users.sourceforge.net
# Download: http://sourceforge.net/projects/bb-news
# Exploit: http://[...]/bb_news_config.inc

# VulnScr: Foros V.1.0
# Author: eupla_at_users.sourceforge.net
# Download: http://sourceforge.net/project/showfiles.php?group_id=14333&package_id=51342
# Exploit: http://[...]/inc/config.inc

#EOF
Received on Jul 03 2006