Date:
14.04.2003

Subject:
Web Wiz Site News realease v3.06 administration access.

Description:
Free asp news management system. Includes, simple intergration,
short news item with link to full story, insert images, links,
text formatting, user comments(optional) with email notification,
anti-spam settings, and more

Vendor:
Web Wiz Guide
http://www.webwizguide.info/

Vulnerability:
Administrator's password is not encrypted. It is
placed in MS Acess database. An attaker may download
it and gain administrators privilegies.
Example: http://www.target.com/news/news.mdb


Black Tigerz Research Group
We are:Areus,Barracuda,n1Tr0f4n,Velzevol,n3ch,drG4nju bas.
Please visit our website: http://www.blacktigerz.org