Guestbook tr3.a

Product : Guestbook tr3.a Version : First WebSite : http://www.planetmoon.net Problem : Viewing passwords file Description: ------------ In this script passwords are in passwd.txt file In Shrot, all who want see the passwords can make it. Exploit: -------- http://somehost/gbdir/files/passwd.txt...

Guestbook tr3.a Password Disclosure

The remote install of Guestbook tr3.a fails to restrict access to its password file. An unauthenticated, remote attacker can leverage this issue to gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Message-ID: From: subj To:...