Web server of NEOTEL | IIS Microsoft. | 80.77.144.13
The exploit is ranked as HIGH RISK because a attacker can take FULL control of the Server.
Proof of Concept:
user:IUSR_WEBSERVER
pass:GE|-TWRZc*****
domain:80
path:c:\inetpub\wwwroot
web site count: 121 web sites can be HACKED
To al users who have a Web page on this server pls change login details and DB access lists updated because every single WEBCONFIG file is readable !!!
ps. We contacted the authority of this companies warning them about this FLAW's but they rejected our suggestions… and we decided to PUBLISH this flaws in our FaceBook Page.
list:
:80:act.com.mk
:80:adtrpenoski.com.mk
:80:aerodrom.gov.mk
:80:agrotehna.com.mk
:80:aleksandrija-a.com.mk
:80:algoritamcentar.com
:80:algoritamcentar.edu.mk
:80:alphagroup.com.mk
:80:ambasadabih.org.mk
:80:amsm.net.mk
:80:arcuss.com
:80:arcuss.net
:80:b-kings.com
:80:b-kings.neotel.net.mk
:80:b2brhs.com.mk
:80:banesombor.com.mk
:80:beershop.com.mk
:80:bella.com.mk
:80:berlitz.com.mk
:80:bica.mk
:80:bica.neotel.net.mk
:80:bih.neotel.net.mk
:80:ccb.mk
:80:ccbank.mk
:80:cdodite.com.mk
:80:cf
:80:cigre.org.mk
:80:cirko-mes.com
:80:diaspora.gov.mk
:80:dna.com.mk
:80:ekonekt.com.mk
:80:elem.com.mk
:80:ema.com.mk
:80:esoft.com.mk
:80:esoftsolution.com.mk
:80:etest.algoritamcentar.edu.mk
:80:euroins.com.mk
:80:fhibc.net.mk
:80:fizijatri.org.mk
:80:fon.edu.mk
:80:fon.mk
:80:fon.neotel.net.mk
:80:fonuniversity.edu.mk
:80:fonuniverzitet.edu.mk
:80:foss.undp.org.mk
:80:generaltourist.com.mk
:80:genesis.com.mk
:80:giff4u.com
:80:goin.com.mk
:80:gps.mk
:80:hqproducts.com.mk
:80:idbc-ingregistar.com.mk
:80:insta-credit.com.mk
:80:institut-kozle.org.mk
:80:intelicom.com.mk
:80:intelikom.com.mk
:80:intellicom.com.mk
:80:internik.com.mk
:80:interworks.com.mk
:80:itgma.com
:80:itm.org.mk
:80:jagodaslaneva.name.mk
:80:jagodaslaneva.neotel.net.mk
:80:jorm.gov.mk
:80:jorm.org.mk
:80:jpssdp.gov.mk
:80:junior.com.mk
:80:kalinhotel.com.mk
:80:karmabella.com.mk
:80:kbpublikum.com.mk
:80:kemofarm.com.mk
:80:kentaur.com.mk
:80:kikservice.com.mk
:80:kirodandaro.com.mk
:80:koli.com.mk
:80:kristino.com.mk
:80:larkom.com.mk
:80:lavita.com.mk
:80:ljubeboskoski.com.mk
:80:maran-atha.org.mk
:80:marketsurv.org.mk
:80:marketsurveillance.org.mk
:80:martin.com.mk
:80:melt.com.mk
:80:mezon.com.mk
:80:mfa.gov.mk
:80:mma.com.mk
:80:namiko.com.mk
:80:namiko.neotel.net.mk
:80:nana.com.mk
:80:neotel.com.mk
:80:neotel.mk
:80:noevi.com.mk
:80:nov.neotel.net.mk
:80:novaalternativa.org.mk
:80:novadom.com.mk
:80:novamakedonija.com.mk
:80:novamakedonija.neotel.net.mk
:80:office1.com.mk
:80:pbf.edu.mk
:80:popovwinery.com.mk
:80:popovwinery.mk
:80:procit.com.mk
:80:realestate.com.mk
:80:redsped.com.mk
:80:remedika.com.mk
:80:restorannacional.com.mk
:80:rolomatik.com.mk
:80:sfc.com.mk
:80:sileksbanka.com.mk
:80:simistravel.com.mk
:80:simt.com.mk
:80:sinergijaplus.com.mk
:80:skopjeair.com.mk
:80:smef.com.mk
:80:speedydelivery.mk
:80:suncity.net.mk
:80:tecnegotino.com.mk
:80:telefonija.com.mk
:80:telefonija.net.mk
:80:tempus.gov.mk
:80:tims.com.mk
:80:transfuzija.org.mk
:80:trelektronik.com.mk
:80:tri-i.com.mk
:80:un.org.mk
:80:undp.org.mk
:80:unystil.com.mk
:80:usje.com.mk
:80:usje.neotel.net.mk
:80:vinart.com.mk
:80:vinart.mk
:80:votopforma.com.mk
:80:wvp.mk
:80:www.algoritamcentar.com
:80:www.arcuss.net
:80:www.ccb.mk
:80:www.ccbank.mk
:80:www.esoftsolution.com.mk
:80:www.fhibc.net.mk
:80:www.fon.mk
:80:www.fonuniversity.edu.mk
:80:www.fonuniverzitet.edu.mk
:80:www.foundation.giff4u.com
:80:www.intelikom.com.mk
:80:www.intellicom.com.mk
:80:www.jorm.gov.mk
:80:www.koli.com.mk
:80:www.marketsurveillance.org.mk
:80:www.neotel.mk
:80:www.popovwinery.mk
:80:www.telefonija.net.mk
:80:www.transfuzija.org.mk
:80:www.uist.edu.mk
:80:www.vinart.mk
:80:www.zamp.com.mk
:80:zora.com.mk
No comments:
Post a Comment