Mole Group Restaurant Directory Script 3.0 Change Admin Pass Vuln

vendor:

Mole Group Restaurant Directory Script

by:

G4N0K

7,5

CVSS

HIGH

Change Admin Password

264

CWE

Product Name: Mole Group Restaurant Directory Script

Affected Version From: 3.0

Affected Version To: 3.0

Patch Exists: YES

Related CWE: N/A

CPE: a:mole-group:mole_group_restaurant_directory_script

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Mole Group Restaurant Directory Script 3.0 Change Admin Pass Vuln

Fireup your web-browser, Navigate to 'http://127.0.0.1/admin/admin_info/index.php' and then fill the form and submit it.

Mitigation:

Ensure that the application is not vulnerable to privilege escalation attacks.

Source

Exploit-DB raw data:

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\...FROM IRAN

==============================================================================
	Mole Group Restaurant Directory Script 3.0 Change Admin Pass Vuln
==============================================================================

	[Â»] Script:.............[ Mole Group Restaurant Directory Script 3.0 ]
	[Â»] Website:............[ http://www.mole-group.com ].................
	[Â»] Today:..............[ 2205009 ]...................................
	[Â»] Founder:............[ G4N0K | mail[.]ganok[sh!t]gmail.com ].......


	
	 [+] NFO
	===============================
       Fireup your web-browser, Navigate to "http://127.0.0.1/admin/admin_info/index.php" and then
	   fill the form and submit it.

	 [+] Demo
	===============================
       http://restaurant.mole-group.com/admin/admin_info/index.php


	 [+] Greetz
	===================================
       [Â»] ALLAH
       [Â»] MSD, AMD, AFN, SMN, Str0ke...
       [Â»] Hussain-X, JiKo, Sakab(!)...

# milw0rm.com [2009-05-22]