Authored by indoushka

Multi Branch School Management System version 3.5 suffers from a backup disclosure vulnerability.

=============================================================================================================================================
| # Title : Multi Branch School Management System 3.5 Backup Disclosure Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 129.0.1 (64 bits) |
| # Vendor : https://school.ramomcoder.com/ |
=============================================================================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Appears to leave backups in a world accessible directory under the document root.

[+] use Payload : /uploads/db_backup/

[+] http://127.0.0.1/Multi/uploads/db_backup/

Greetings to :=====================================================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|
===================================================================================================