exploit-db-mirror/exploits/asp/webapps/21925.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

7 lines
No EOL
450 B
Text

source: http://www.securityfocus.com/bid/5929/info
SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.
One of the files (userlist.asp) that comes with the web interface contains a listing of administrative usernames/passwords. Users who can access this file will gain access to authentication credentials for other users.
http://www.example.com/web/usermgr/userlist.asp