[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
"Simple PHP Newsletter" Remote Admin Password Change With install path
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: "Simple PHP Newsletter" Remote Admin Password Change With install path
- From: cseye_ut@xxxxxxxxx
- Date: Mon, 28 Mar 2011 15:41:06 -0600
#####################################################################################
#### "Simple PHP Newsletter" Remote Admin Password Change With
####
#### install path
####
#####################################################################################
#
#
# Author: alieye
#
#
#
# class : remote
#
#
#
# E-mail: cseye_ut@xxxxxxxxx
#
#
#
# greetz: C.S.Eye Security Team members
#
#
#
# We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers
#
#
#
# Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com
#
#####################################################################################
download : http://quirm.net/download/23/
Dork : intitle:"News list Administration panel" or "Simple PHP Newsletter"
Example :
1. Go to url : target.com/newsletter/admin.php or target.com/mailer/admin.php
2. Clean admin.php and Go to target.com/newsletter/install/install1.php or
target.com/mailer/install/install1.php
3. Write new password for admin and click next stage
4. finish install
5. Go to url : target.com/newsletter/admin.php or target.com/mailer/admin.php
5. Login admin with new password