CVE-2003-1541

PlanetMoon Guestbook tr3.a stores sensitive information under the web root due to insufficient access control. This enables remote attackers to obtain the admin script password (and other passwords) via a direct request to files/passwd.txt. The available sources describe information disclosure wi...

Guestbook tr3.a

Product : Guestbook tr3.a Version : First WebSite : http://www.planetmoon.net Problem : Viewing passwords file Description: ------------ In this script passwords are in passwd.txt file In Shrot, all who want see the passwords can make it. Exploit: -------- http://somehost/gbdir/files/passwd.txt...

Guestbook tr3.a Password Disclosure

The remote install of Guestbook tr3.a fails to restrict access to its password file. An unauthenticated, remote attacker can leverage this issue to gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Message-ID: From: subj To:...