Lawyer CMS 1.6 Insecure Settings
2024-8-19 22:11:58 Author: packetstormsecurity.com(查看原文) 阅读量:4 收藏

====================================================================================================================================
| # Title : Lawyer CMS 1.6 Insecure Settings Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) |
| # Vendor : https://demo.phpscriptpoint.com/lawyer/ |
====================================================================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Insecure Settings : appears to leave a default administrative account in place post installation.

[+] use payload : user = [email protected] & pass = 1234

[+] https://www/127.0.0.1/demo/phpscriptpointcom/lawyer//admin

Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================


文章来源: https://packetstormsecurity.com/files/180225/lawyercms16-insecure.txt
如有侵权请联系:admin#unsafe.sh