mailing list archives
Compozit Webhosting Panel Administration Vulnerability
From: "eric basher" <basher13 () linuxmail org>
Date: Thu, 05 May 2005 19:16:49 +0800
"Compozit Webhosting Panel Administration Vulnerability"
Compozit is a France Webhosting that use Administration Panel to setup their website
online.Have an Control Panel to upload,make a new directory,and modify web page.
The administration page is so vulnerability to get access admin privallage.
Use SQL Injection in the form admin login,then we can run as Admininistration of website.
User may upload malicious script,backdoors,trojan that can made run to the
Administration system computer.
Sample of client :
On the login form use SQL Injection:
login : admin
Pass : 'or '='
W00t! we have g0t Admin land...
Vendor had being contact
Published by - basher13[basher13 () linuxmail org]
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Compozit Webhosting Panel Administration Vulnerability eric basher (May 05)