GHDB « Hackers For Charity



Google Search: inurl:postfixadmin intitle:"postfix admin" ext:php

murfie rates this entry 2 out of 10.
Submitted: 2004-11-16 17:15:27
Added by: murfie
Hits: 1325
Score: 2

Postfix Admin login pages. Duh.


2005-11-16 15:55:22 (golfo): You get more results now with this search:

intitle:"Postfix Admin - *" "Check for update" -forums

For those who know this otherwise very nice package, there's one huge danger involved. There are 2 ways for admin logins, one is the regular html form, but the less known is adding postfixadmin/admin/ to the urls. This pops up a BASIC authentication login scheme that has defaults that sometimes aren't changed.