Bugtraq mailing list archives
"Simple PHP Newsletter" Remote Admin Password Change With install path
From: cseye_ut () yahoo com
Date: 29 Mar 2011 14:03:20 -0000
##################################################################################### #### "Simple PHP Newsletter" Remote Admin Password Change With #### #### install path #### ##################################################################################### # # # Author: alieye # # # # class : remote # # # # E-mail: cseye_ut () yahoo com # # # # greetz: C.S.Eye Security Team members # # # # We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers # # # # Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com # ##################################################################################### download : http://quirm.net/download/23/ Dork : intitle:"News list Administration panel" or "Simple PHP Newsletter" Example : 1. Go to url : target.com/newsletter/admin.php or target.com/mailer/admin.php 2. Clean admin.php and Go to target.com/newsletter/install/install1.php or target.com/mailer/install/install1.php 3. Write new password for admin and click next stage 4. finish install 5. Go to url : target.com/newsletter/admin.php or target.com/mailer/admin.php 5. Login admin with new password Date : 03/29/2011
Current thread:
- "Simple PHP Newsletter" Remote Admin Password Change With install path cseye_ut (Mar 29)
- Re: "Simple PHP Newsletter" Remote Admin Password Change With install path Patrick Kelley (Mar 30)
- <Possible follow-ups>
- "Simple PHP Newsletter" Remote Admin Password Change With install path cseye_ut (Mar 29)