BlogWorx Blog Database Disclosure Vulnerability

vendor:

BlogWorx Blog

by:

LionTurk

7,5

CVSS

HIGH

Database Disclosure

200

CWE

Product Name: BlogWorx Blog

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

BlogWorx Blog Database Disclosure Vulnerability

An attacker can exploit this vulnerability by accessing the users.mdb or teadmin.mdb file located in the db directory of the application. This will allow the attacker to view the database contents and gain access to sensitive information.

Mitigation:

Ensure that the application is not exposing any sensitive information in the database files.

Source

Exploit-DB raw data:

==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Mutlu Yillar Millettt

==============================================================================  

        [»] BlogWorx Blog Database Disclosure Vulnerability  

==============================================================================  

   

    [»] Script:             [ BlogWorx Blog ]  

    [»] Language:           [ ASP ]  

    [»] Download:           [ http://devworx.somee.com/] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com }

    [»] My Home:            [ RevengeHack.com ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://server/db/users.mdb Or db/teadmin.mdb
                                      


  [»] © 2008 devworx - devworx.somee.com

  




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Turk'uz Varmi Otesi?

###########################################################################