logo Home

Untitled Document

Home > Archives Advisories > Articles


Untitled Document

Untitled Document

Web Wiz Site News administration access
Date: 2003-04-15

Author : drG4njubas <http://www.blacktigerz.org>

Subject:
Web Wiz Site News realease v3.06 administration access.

Description:
Free asp news management system. Includes, simple intergration,
short news item with link to full story, insert images, links,
text formatting, user comments(optional) with email notification,
anti-spam settings, and more

Vendor:
Web Wiz Guide
http://www.webwizguide.info/

Vulnerability:
Administrator's password is not encrypted. It is
placed in MS Acess database. An attaker may download
it and gain administrators privilegies.

Example: http://www.target.com/news/news.mdb



 

arrowSearch Advisories

arrowNewsletter

Free weekly Newsletter.

Please enter your email address here:
arrowReport Vulnerability

If you've found a vulnerability please
click here to report it.
arrowPartners

newsnow

About Us | Contact Us | Advertise | email | Backend flag
Copyright © 2016-2017 Security Corporation - All Rights Reserved - Legal - Privacy Policy