Futility Forum 1.0 Revamp DB Download Vulnerability

vendor:

Futility Forum 1.0 Revamp

by:

indoushka

7.5

CVSS

HIGH

Database Download Vulnerability

N/A

CWE

Product Name: Futility Forum 1.0 Revamp

Affected Version From: Futility Forum 1.0 Revamp

Affected Version To: Futility Forum 1.0 Revamp

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)

Unknown

Futility Forum 1.0 Revamp DB Download Vulnerability

The vulnerability allows an attacker to download the database of the Futility Forum 1.0 Revamp application. The attacker can access the database by sending a request to the message.mdb file.

Mitigation:

The vendor has not provided any mitigation or remediation for this vulnerability.

Source

Exploit-DB raw data:

========================================================================================                  
| # Title    : Futility Forum 1.0 Revamp DB Download Vulnerability                     |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Futility Forum 1.0 Revamp                                               |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : DB                                                                      | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/futility1a/message.mdb
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * 
-------------------------------------------------------------------------------------------