Simple CMS Administrator Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ============================================================ Simple CMS Administrator Authentication Bypass Vulnerability ============================================================ Simple CMS Information: The cms from...

Simple CMS - Administrator Authentication Bypass

Simple CMS Information: The cms from http://www.cms-center.com/ uses no security at all, just a boolean "isloggedin". If you submit "loggedin=1" in the URL of any of the admin pages, you get full controll. Vulnerable code: if $loggedin != "1" header"Location: /login.php?e=1"; / Redirect browser /...