[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] [+] Exploit Name : PhotoCart Authorization Bypass Vulnerability [+] Exploit Submitted By : Ashiyane Digital Security Team [+] Date : 2014/6/15 [+] Google Dork : inurl:"photocart/admin/" [+] Vendor Page : https://www.picturespro.com/photo-cart/ [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] Description : Photo-Cart is a Photo Gallery script which has a vulnerability named Authorization Bypass . By This vulnerability you can login to admin panel without entering '=' 'or' instead of username and password . Location : [localhost]/photocart/admin/manage.php Demo : http://www.susXXXooperphotography.com/photocart/admin/manage.php http://www.angXXXrfekt.com/photocart/admin/manage.php http://www.zipXXXostudio.com/event/admin/manage.php ********************** Found By : Pedmarzon **********************