PHP MySQL Banner Exchange 2.2.1 remote mysql database bug

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug
From: arsalan1991@xxxxxxxxx
Date: 14 Dec 2007 08:42:16 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Discovered by Arsalan kashan
email=arsalan1991@xxxxxxxxx
portal=PHP MySQL Banner Exchange
download=http://sourceforge.net/projects/banex
version=2.2.1
bug:
its store the mysql database setting in a .inc file and you can easily read it 
as a anonymous user
/script_path/inc/lib.inc
the you can connect to mysql database

Prev by Date: Re: AW: MS Office 2007: Digital Signature does not protect Meta-Data
Next by Date: Re: MS Office 2007: Digital Signature does not protect Meta-Data
Previous by thread: Re: AW: MS Office 2007: Digital Signature does not protect Meta-Data
Next by thread: Re: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug
Index(es):
- Date
- Thread