WebFileExplorer V3.1 Released

vendor:

WebFileExplorer

by:

ByALBAYX

9.3

CVSS

HIGH

Database Disclosure

200

CWE

Product Name: WebFileExplorer

Affected Version From: V3.1

Affected Version To: V3.1

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

WebFileExplorer V3.1 Released

A vulnerability in WebFileExplorer V3.1 allows an attacker to access the database file DB.MDB, which contains sensitive information such as usernames and passwords.

Mitigation:

Upgrade to the latest version of WebFileExplorer

Source

Exploit-DB raw data:

@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=Contry   : Turkish
@~~=======================================~~@
@~~=Script   :WebFileExplorer V3.1 Released

@~~=S.Site   :http://www.webfileexplorer.com

@~~=Demo     :http://www.webfileexplorer.com/demo.htm
@~~=======================================~~@

@~~=Vul      :

@~~=http://c4team.org / [PATH] /DATA/DB.MDB

@~~=======================================~~@
@~~=Demo:

@~~=[DATABASE DISCLOSURE]

@~~=http://files.soa.org/webfileexplorer/DATA/DB.MDB

@~~====================================================~~@
@~~= Kralman / Spotgang / Rebelist / Mr.Silent / Mrabah.12r / Darbe / Redline / Master_Hacker / K3v!n /

@~~= + Unutmayanlar Icin 

@~~= Bir SÃ¼re Yoqum :(
@~~====================================================~~@

# milw0rm.com [2009-04-08]