Another vulnerability in hosting controller

From: Bao Dai Nhan <baodainhan_at_fptnet.com>
Date: 19 May 2002 10:10:50 -0000

('binary' encoding is not supported, stored as-is) 1/If admin doesn't change or delete user AdvWebadmin, the
default password of this user is advcomm500349, you can
creat your own account or use this account to hack the
server.
1/ A foolish vulnerability, i can view the harddisk by
using the file browse.asp in directory admin
www.victim.com/admin/browse.asp?FilePath=c:\&Opt=2&level=0

BAODAINHAN
baodainhan_at_fptnet.com
www.viethacker.net
Received on May 20 2002