AOH :: HP Unsorted S :: B06-5593.HTM

Stanford university SCARF user editing



Stanford university SCARF user editing
Stanford university SCARF user editing



vendor:Someone at Stanford university
site:http://sourceforge.net/projects/scarf/ 

vuln:
There is no admin check on the file generaloptions.php So anyone can go in and make some changes.  One thing to do would be create a user, then go into general options and change your user to an admin.  You can also change the background, title, and css page through this file.
-navairum

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.