OA E-Office mysql_config.ini - Information Disclosure Detection

E-Office mysqlconfig.ini file can be directly accessed, leaking database account password and other information !/usr/bin/env python3 -- coding: utf-8 -- """E-Office mysqlconfig.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

CVE-2015-7224

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...