facebook facebook twitter rss

Design & Develop by Mahamud Bangladesh Education Unauthorized Arbitrary Insert File Vulnerability

Author: KingSkrupellos , Published: 16-11-2018
# Exploit Title : Design & Develop by Mahamud Bangladesh Education Unauthorized Arbitrary Insert File Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 13/11/2018
# Vendor Homepage : facebook.com/cemahamud/
# Tested On : Windows and Linux
# Category : WebApps
# Google Dorks : intext:''Design & Develop by Mahamud.'' site:edu.bd
# Exploit Risk : Medium
# CWE : CWE-264 - [ Permissions, Privileges, and Access Controls ]

#################################################################################################

# Admin Login Panel Path :

/adminlogin

# Exploit :

/home/addmission
/Home/Addmission

+ Note => Right Click - Show Image Source Link.

# Directory File Path :

/uploads/[RANDOM-NUMBERS].txt

Note : Just use '' Upload File '' Button. You don't need to fulfill the form. Forget it.

Note 2 : Only this file extensions are allowed : jpg - gif - png - pdf - txt - docx.

#################################################################################################

# Example Vulnerable Sites =>

[+] napghs.edu.bd/home/addmission

[+] pbdm.edu.bd/home/addmission

[+] igmhs.edu.bd/home/addmission

[+] chakendakhs.edu.bd/home/addmission

[+] chanderhatghs.edu.bd/home/addmission

[+] cssdm.edu.bd/home/addmission

[+] cbphs.edu.bd/home/addmission

[+] kuhardahramsecondaryschool.edu.bd/home/addmission

[+] kamarparaschoolandcollege.edu.bd/home/addmission

[+] kmboulpuriamadrasha.edu.bd/home/addmission

[+] bswahejiadakhilmadrasha.edu.bd/home/addmission

[+] alokitobangladeshtbmcollege.edu.bd/home/addmission

[+] hamchapurdakhilmadrasah.edu.bd/home/addmission

[+] hartakitalaurfulsmritihighschool.edu.bd/home/addmission

[+] dpsecondaryschool.edu.bd/home/addmission

[+] gulgiaiamadrasha.edu.bd/home/addmission

[+] bamondanganmhs.edu.bd/home/addmission

[+] luxmikanta-hs.edu.bd/home/addmission

[+] chipabaraikhalisecondaryschool.edu.bd/home/addmission

[+] sprashidiahighschool.edu.bd/home/addmission

[+] salimabaddegreecollege.edu.bd/home/addmission

[+] holokhanahschool.edu.bd/home/addmission

[+] abdulazizmemorialhighschool.edu.bd/home/addmission

#################################################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

#################################################################################################

Like us on Facebook :