EUVD-2006-3364

Malware in sbrugna...

MultipleDisclose.txt

Title: 5 php scripts remote database password disclosure Date: Sun July 02 21:04 2006 Credits: Security hole discovered by DarkFig [email protected] Problem: Database configuration is located in a .inc fileno protected by .htaccess file Web: http://acid-root.new.fr VulnScr: Mp3netbox Beta 1...

CVE-2006-3368

Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

CVE-2006-3368

Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

CVE-2006-3368

CVE-2006-3368 affects Efone 20000723. The issue arises because config.inc is stored under the web document root with insufficient access control, enabling remote attackers to obtain sensitive information (information disclosure). Public references (NVD, CVE lists) corroborate the description; no ...