MultipleDisclose.txt

Title: 5 php scripts remote database password disclosure Date: Sun July 02 21:04 2006 Credits: Security hole discovered by DarkFig [email protected] Problem: Database configuration is located in a .inc fileno protected by .htaccess file Web: http://acid-root.new.fr VulnScr: Mp3netbox Beta 1...

CVE-2006-3370

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3370

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3370

Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, enabling remote attackers to read sensitive information including the database configuration. Affected software: Blueboy 1.0.3. Root cause: inadequate access control on web-root files exposing bb...