Loan Management System 2024 1.0 Insecure Settings

Loan Management System 2024 1.0 Insecure Settings

Posted Sep 2, 2024

Authored by indoushka

Loan Management System 2024 version 1.0 suffers from an ignored default credential vulnerability.

tags | exploit

SHA-256 | 4e37e483991ec7b37ab54ed035920c62f7033979ca509714b26270c8fabb131b

Download | Favorite | View

Loan Management System 2024 1.0 Insecure Settings

=============================================================================================================================================| # Title     : Loan Management System 2024 v1.0 Insecure Settings Vulnerability                                                            || # Author    : indoushka                                                                                                                   || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits)                                                            || # Vendor    : https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.html                  |=============================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Insecure Settings : appears to leave a default administrative account in place post installation.[+] use payload : user =  admin & pass = admin[+] https://www/127.0.0.1/165.232.176.12/index.phpGreetings to :==================================================jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R |================================================================

File Tags

• ActiveX (933)
• Advisory (86,597)
• Arbitrary (17,025)
• BBS (2,859)
• Bypass (1,898)
• CGI (1,047)
• Code Execution (7,867)
• Conference (691)
• Cracker (844)
• CSRF (3,418)
• DoS (25,183)
• Encryption (2,389)
• Exploit (54,093)
• File Inclusion (4,271)
• File Upload (1,006)
• Firewall (822)
• Info Disclosure (2,910)
• Intrusion Detection (916)
• Java (3,155)
• JavaScript (907)
• Kernel (7,249)
• Local (14,833)
• Magazine (587)
• Overflow (13,203)
• Perl (1,435)
• PHP (5,253)
• Proof of Concept (2,399)
• Protocol (3,745)
• Python (1,651)
• Remote (31,809)
• Root (3,668)
• Rootkit (529)
• Ruby (640)
• Scanner (1,657)
• Security Tool (8,035)
• Shell (3,295)
• Shellcode (1,219)
• Sniffer (904)
• Spoof (2,291)
• SQL Injection (16,692)
• TCP (2,462)
• Trojan (690)
• UDP (919)
• Virus (671)
• Vulnerability (33,046)
• Web (10,128)
• Whitepaper (3,782)
• x86 (969)
• XSS (18,277)
• Other

File Archives

• September 2024
• August 2024
• July 2024
• June 2024
• May 2024
• April 2024
• March 2024
• February 2024
• January 2024
• December 2023
• November 2023
• October 2023
• Older

Systems

• AIX (429)
• Apple (2,104)
• BSD (378)
• CentOS (61)
• Cisco (1,954)
• Debian (7,114)
• Fedora (1,693)
• FreeBSD (1,247)
• Gentoo (4,567)
• HPUX (880)
• iOS (387)
• iPhone (108)
• IRIX (220)
• Juniper (71)
• Linux (50,978)
• Mac OS X (696)
• Mandriva (3,105)
• NetBSD (256)
• OpenBSD (489)
• RedHat (16,661)
• Slackware (941)
• Solaris (1,614)
• SUSE (1,444)
• Ubuntu (9,794)
• UNIX (9,443)
• UnixWare (187)
• Windows (6,756)
• Other