Grid Gallery 1.0 – Admin Panel Authentication Bypass

• Exploit Database
• 136 阅读

• 作者： Ali BawazeEer
  日期： 2016-06-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/39935/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43

  <!-- # Exploit Title:Grid Gallery 1.0 - Admin panel Authentication bypass # Date: 13th June 2016 # Exploit Author: Ali BawazeEer # Vendor Homepage: http://phpstaff.com.br/ # Version: 2.0   --!>     =======================================================================================================   Grid Gallery 1.0 Admin panel Authentication bypass   Description : An Attackers are able to completely compromise the web application built upon Grid Gallery as they can gain access to the admin panel and manage the website as an admin without prior authentication!     Step 1: Create a rule in No-Redirect Add-on: ^http://example.com/path/admin/login.php Step 2: Access http://example.com/path/admin/index.php     Risk : Unauthenticated attackers are able to gain full access to the administrator panel and thus have total control over the web application, including content change,add admin user .. etc   ======================================================================================================= potential fix     <?php session_start(); if (!isset($_SESSION["auth"])) { exit(header(&apos;Location: admin/login.php&apos;)); }   ?>     [+] Exploit by: Ali BawazeEer [+] Twitter:@AlibawazeEer [+] Linkedin : https://www.linkedin.com/in/AliBawazeEer