ext:asp inurl:DUgallery intitle:"3.0" -site:dugallery.com -site:duware.com

GHDB-ID:

676

Author:

anonymous

Google Dork Description:

ext:asp inurl:DUgallery intitle:"3.0" -site:dugallery.com -site:duware.com

The MS access database can be downloaded from inside the docroot. The user table holds the admin password in plain text. Possible locations for the dugallery database are:http://xx/.../DUgallery/database/dugallery.mdbhttp://xx/.../DUgallery//_private/DUgallery.mdbhttp://www.securitytracker.com/alerts/2004/Nov/1012201.html