-
CuteNews news system
Does anyone know how to view the file
www.site.com/cutenews/data/users.db.php?
maybe it has to do with sql? or cross scripting? or maybe even soemthing simpler? can anyone help?
in other words, how would i be able to view the contents of a page that gives a 403 forbidden error when accessed directly. but there really is a file under there.
-
Re: CuteNews news system
Uh, Forbidden means forbidden. Verboten. No entry. Comprende?
Besides, that link is a 404, not 403.
-
Re: CuteNews news system
no duh it would be a 404. that link doesn't exist. its just a example. and it is possible because ive seen it done. maybe it has something to do with google searches? like site:www.site.com inurl:data? or something like that? ne help?
-
Re: CuteNews news system
You could look for the place where you can log in. Supply valid credentials and then you might be able to visit the site.
Some sites also check the referer, but those that do are stupid, because it's so easy to fake.