MultipleDisclose.txt

Title: 5 php scripts remote database password disclosure Date: Sun July 02 21:04 2006 Credits: Security hole discovered by DarkFig [email protected] Problem: Database configuration is located in a .inc fileno protected by .htaccess file Web: http://acid-root.new.fr VulnScr: Mp3netbox Beta 1...

CVE-2006-3367

Mp3 JudeBox Server Mp3NetBox Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3367

Mp3 JudeBox Server Mp3NetBox Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...