# Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit ################ KAPDA - Security Science Researchers Institute ################# #Advisory : http://www.kapda.ir/advisory-337.html #Vendor : http://www.nukedit.com/ #What is : Nukedit is a Free Content Management #Vulnerability : Unauthorized Admin Add Exploit if "register.asp" be enable! #Discovered : 3nitro - farhadkey {AT} kapda [d0t] ir #Vulnerabale versions : <= 4.9.6 #Grtz to : Irannetjob.com, Maskofgod.net, Hamid.ir, ihsteam.com, simorhg-ev.com, hat-squad.com #Solution : update to new version of nukedit . #Change "http://victim.com/nukedit/utilities/register.asp" ################ KAPDA - Security Science Researchers Institute #################
Kapda HTML PoC For Nukedit <= 4.9.6 (With Security Patch) Unauthorized Admin Add Exploit
Discovered and coded by 3nitro - farhadkey {AT} kapda [dot] ir
Change the form's action in source : "http://victim.com/nukedit/utilities/register.asp"
Fill the blank and submit . After that login with your email ! + your password .

Username :
Your E-mail :
Your Password :
# milw0rm.com [2006-05-29]