New eVuln Advisory: Text Rider Sensitive Information Disclosure http://evuln.com/vulns/46/summary.html --------------------Summary---------------- Software: Text Rider Sowtware's Web Site: http://robot.ir/blog/mollasadra/textrider/ Versions: 2.4 Critical Level: Dangerous Type: Sensitive Information Disclosure Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) eVuln ID: EV0046 -----------------Description--------------- Directory data isn't protected by htaccess in default installiation. This can be used to retrieve registered user's information including logins and password's md5 hashes. Cookie-based authentication is threatened. To authenticate as administrator cookies need to contain the folowing: username=[admin user] password=[md5 hash] Administrator has an ability to edit "config.php" file and upload arbitrary files. System access is possible. --------------Exploit---------------------- Available at: http://evuln.com/vulns/46/exploit.html --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
