EDB-3302
functionalLotus Domino R6 Webmail - Remote Password Hash Dumper
view exploit source exploit_dbverifiedtype remoteauthor Marco Ivaldipublished 2007-02-13catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-0977US | high7.1OT high | Exploit | ||
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDo… | ||||
| CVE-2005-2428US | medium5.0OT high | Exploit | ||
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the H… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan