Zen Help Desk versions 2.1 and below suffer form a direct database download vulnerability.
141e203e5f24dc3b4abaf542cbe3186e24ecd873c570b9271c18058dc87558fb
--/ INTRODUCTION --
*
*
* Advisory : Zen Help Desk ==> Version 2.1 Bypass/Database Download Vulnerability
* Release Date : 25 / 05 / 2007
* Application : Zen Help Desk ==> Version 2.1
* Impact : Remote
* Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or
* or"allinurl:trackrequest.asp"
* Author : Titanichacker
* Contact : the-modest-pirate (at) hotmail (dot) com [email concealed]
* Home page : http://Hack-Teach.org
*
*
--/ REPRODUCE --
# Attackers Can Authentication Bypass In This Product By Add The Following
Files:
('/ZenHelpDesk.mdb') And Download The Database Which Contains Table Named
[admin]
The admin Name And Password Inside
thanx
cold-zero & mohandko & tryag team & hack-teach & drbaka & arb-hawk
# www.Hack-Teach.com & mohandko.com & tryag.com
_________________________________________________________________
Play free games, earn tickets, get cool prizes! Join Live Search Club.
http://club.live.com/home.aspx?icid=CLUB_wlmailtextlink