Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman

Advanced Electron Forum <= 1.0.6 Remote Code Execution

PHP pro bid v 6.04 SQL injection

LooYu Web IM 2008 Cross-Site Scripting Vulnerabilities

From:	sn0oPy.team_(at)_gmail.com <sn0oPy.team_(at)_gmail.com>
Date:	20.09.2008
Subject:	Annuaire Téléphonique v1.0 Sensetive Files (MDP)

* Annutel - Annuaire Téléphonique v1.0 Sensetive Files (MDP)

* By : sn0oPy

* Risk : Low

* Dork : inurl:"annuaire/annuaire.php3?task=1"

* exploit :

Found the http://Siter/annuaire/add/annuaire.php3? Page, get the source, and find the “f (code !=” for password, it’s all
;)

* contact : sn0oPy (at) avenir-geopolitique (dot) net

* greetz : [subzero], Maria, Avg Team(forums.avenir-geopolitique.net).