high7.5Public exploit code
CVE-2009-4096
RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user credenti…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Radio istek scripti 2.5 - Remote Configuration Disclosure2009-11-25 · webapps · php · Verified
Impact
RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user credentials via a direct request for estafresgaftesantusyan.inc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scriptlerim | Radio Isetek Scripti | Version 2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/60516
- http://packetstormsecurity.org/0911-exploits/istek-disclose.txt
- http://secunia.com/advisories/37478
- http://www.exploit-db.com/exploits/10231
- http://osvdb.org/60516
- http://packetstormsecurity.org/0911-exploits/istek-disclose.txt
- http://secunia.com/advisories/37478
- http://www.exploit-db.com/exploits/10231