Games Script (Galore) Backup Dump Vulnerability

vendor:

Games Script (Galore)

by:

indoushka

N/A

CVSS

N/A

Backup Dump

N/A

CWE

Product Name: Games Script (Galore)

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)

2008

Games Script (Galore) Backup Dump Vulnerability

An attacker can exploit this vulnerability by accessing the backup directory of the Games Script (Galore) application, located at http://127.0.0.1/Games Script (Galore)/admincp/backup/ and by logging in to the admincp directory at http://127.0.0.1/Games Script (Galore)/admincp/.

Mitigation:

N/A

Source

Exploit-DB raw data:

========================================================================================                  
| # Title    : Games Script (Galore) Backup Dump Vulnerability            
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com                                                                             
| # Script   : Copyright © 2008 GamesGalore.tld - [iAG] NULLED      
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Backup Dump                                                                      
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 1- http://127.0.0.1/Games Script (Galore)/admincp/backup/
 
 2- http://127.0.0.1/Games Script (Galore)/admincp/ (2 Login)
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.sa-hacker.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
---------------------------------------------------------------------------------------------------------------