bugtraq - [KAPDA::#46] - Nukedit Unauthorized Admin Add

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060529190953.9792.qmail@securityfocus.com>
Date: 29 May 2006 19:09:53 -0000
From: farhadkey@...da.ir
To: bugtraq@...urityfocus.com
Subject: [KAPDA::#46] - Nukedit Unauthorized Admin Add


[KAPDA::#46] - Nukedit Unauthorized Admin Add

KAPDA New advisory

Vulnerable product : Nukedit <= 4.9.6
Vendor: http://www.nukedit.com
Vulnerability: Unauthorized Admin Add

Date :
--------------------
Found : 2006/05/10
Vendor Contacted : N/A
Release Date : 2006/05/29

About Nukedit :
--------------------
Nukedit is a Content Management System (CMS).

Vulnerable page:
--------------------
utilities/register.asp

PoC:
--------------------
HTML PoC : http://kapda.ir/attach-1661-nukedit.txt
Save this code as .htm and then execute.
This exploit will create an admin acount .
Then login with your email ! + your password .

Solution:
--------------------
Update to new version of nukedit .

Original Advisory:
--------------------
http://www.kapda.ir/advisory-337.html

Credit :
--------------------
FarhadKey of KAPDA
farhadkey [at} kapda <d0t> net
Kapda - Security Science Researchers Insitute of Iran
http://www.KAPDA.ir