Lucene search
K

Atmail WebAdmin / Webmail Control Panel SQL Root Password Disclosure

🗓️ 23 Jul 2012 00:00:00Reported by Ciph3rType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 23 Views

Atmail WebAdmin vulnerability allows SQL Root password access via config file disclosure.

Code
`######################################################################################  
# Vuln Title: Atmail WebAdmin and webmail Control Panel Remote Access SQL Root password Vulnerability  
#  
# Author: FaryadR (a.k.a Ciph3r)  
# tested on : Atmail Email Server 6.20.8  
# Twitter : https://twitter.com/faryadR  
# Mail : [email protected]  
# Website : http://0c0c0c0c.com  
# Vendor : http://atmail.com  
# Powered by Atmail 6.20.8 - WebAdmin Control Panel   
#  
######################################################################################  
  
[+]Vulnerability :  
  
you can Access All Atmail Webadmin Mail server Configuration and SQL Root Password  
  
  
[+]Poc :  
  
Go to webmail and config Directory and type dbconfig.ini for Access all SQL Configuration  
  
[+]Demo for Test Vuln :  
  
[+]Atmail 6.20.8  
  
http://server/config/dbconfig.ini  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation