Headline
Innue Business Live Chat 2.5 Insecure Settings
Innue Business Live Chat version 2.5 suffers from an ignored default credential vulnerability.
Innue Business Live Chat 2.5 Insecure Settings
Posted Jul 29, 2024
Authored by indoushka
Innue Business Live Chat version 2.5 suffers from an ignored default credential vulnerability.
tags | exploit
SHA-256 | 69cf2bb9bb7d7ff376d99fe228145e43a3757fab2416d6aff6f75b372ddf2d3a
Download | Favorite | View
Innue Business Live Chat 2.5 Insecure Settings
====================================================================================================================================| # Title : innue business live chat v2.5 Insecure Settings Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) || # Vendor : https://www.bdtask.com/business-live-chat-software.php |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Insecure Settings : appears to leave a default administrative account in place post installation.[+] use payload : user = [email protected] & pass = admin[+] https://www/127.0.0.1/vmi1941086contaboservernet/loginGreetings to :==================================================jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R |================================================================
File Tags
- ActiveX (933)
- Advisory (86,161)
- Arbitrary (16,833)
- BBS (2,859)
- Bypass (1,853)
- CGI (1,033)
- Code Execution (7,780)
- Conference (691)
- Cracker (844)
- CSRF (3,380)
- DoS (25,014)
- Encryption (2,389)
- Exploit (53,083)
- File Inclusion (4,257)
- File Upload (989)
- Firewall (822)
- Info Disclosure (2,876)
- Intrusion Detection (914)
- Java (3,141)
- JavaScript (895)
- Kernel (7,179)
- Local (14,782)
- Magazine (586)
- Overflow (13,153)
- Perl (1,435)
- PHP (5,220)
- Proof of Concept (2,381)
- Protocol (3,723)
- Python (1,630)
- Remote (31,618)
- Root (3,625)
- Rootkit (526)
- Ruby (631)
- Scanner (1,657)
- Security Tool (8,023)
- Shell (3,272)
- Shellcode (1,217)
- Sniffer (902)
- Spoof (2,271)
- SQL Injection (16,589)
- TCP (2,440)
- Trojan (690)
- UDP (901)
- Virus (669)
- Vulnerability (32,911)
- Web (9,949)
- Whitepaper (3,781)
- x86 (967)
- XSS (18,236)
- Other
File Archives
- July 2024
- June 2024
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- Older
Systems
- AIX (429)
- Apple (2,090)
- BSD (377)
- CentOS (58)
- Cisco (1,927)
- Debian (7,084)
- Fedora (1,693)
- FreeBSD (1,246)
- Gentoo (4,534)
- HPUX (880)
- iOS (376)
- iPhone (108)
- IRIX (220)
- Juniper (69)
- Linux (50,556)
- Mac OS X (691)
- Mandriva (3,105)
- NetBSD (256)
- OpenBSD (489)
- RedHat (16,418)
- Slackware (941)
- Solaris (1,611)
- SUSE (1,444)
- Ubuntu (9,700)
- UNIX (9,431)
- UnixWare (187)
- Windows (6,667)
- Other