Exploit SAFE TEAM Regulus 2.2 - Staffile Information Disclosure

[Exploiter]

EDB-ID

24581

Проверка EDB

1. Пройдено

Автор

MASUD_LIBRA

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2004-09-07

SAFE TEAM Regulus 2.2 - Staffile Information Disclosure

source: https://www.securityfocus.com/bid/11132/info

SAFE TEAM Regulus is reported prone to an information disclosure vulnerability. It is reported that any user may make a request for the Regulus 'staffile' file hosted on a target server. This file contains a list of Regulus 'staff' users and their corresponding password hashes.

An attacker may employ data that is obtained in this manner to aid in further attacks launched against the vulnerable software.

http://example.com/base-dir/access/stafffile