Vulnerabilities > CVE-2008-3859 - Credentials Management vulnerability in Davlin Thickbox Gallery 2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
davlin
CWE-255
exploit available
NVD
Published: 2008-08-29
Updated: 2017-09-29

Summary

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php.

Vulnerable Configurations

Part Description Count
Application
Davlin
1

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionThickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability. CVE-2008-3859. Webapps exploit for php platform
fileexploits/php/webapps/6314.txt
idEDB-ID:6314
last seen2016-02-01
modified2008-08-26
platformphp
port
published2008-08-26
reporterSirGod
sourcehttps://www.exploit-db.com/download/6314/
titleThickbox Gallery 2.0 - admins.php Admin Data Disclosure Vulnerability
typewebapps

References