Indonesian Government & University Admin weak password

2019.05.03

L4663r666h05t (ID)

Risk: Medium

Local: No

Remote: Yes

CVE: -

CWE: -

Dork: inurl:/web/strukturorganisasi/ site:

# Exploit Title: Indonesian Government & University Admin weak password
# Exploit Author: L4663R666H05T - PhantomGhost
# Vendor Homepage: -
# Dork: inurl:/web/strukturorganisasi/ site:
# Login: http://localhost/admin/ | http://localhost/login/ | http://localhost/web/admin/ | http://localhost/web/login
Impact:
An attacker can login admin dashboard & can create a news or anything, but an attacker can not upload a backdoor.
Fill username & password = admin
Login the dashboard, you can create a news but you can not upload a backdoor. Only add news, change website title & change admin password
Thanks to: PhantomGhost - Exploiter.ID - ShoursCout - Toxic666.id
#PhantomGhost #IndonesianHacker

References:

No Reference

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Indonesian Government & University Admin weak password

Dork: inurl:/web/strukturorganisasi/ site:

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.