Admin panel exposed

Home » Blog » Admin panel exposed

Description

During the scan, Cytrix managed to find that the administrator’s login page is viewable and accessible through any IP address.

An attacker could exploit this finding to perform BruteForce attacks against users, or, to create a similar phishing page scamming users and more.

Recommendation

Define and restrict access which IP addresses are allowed to access the administrator’s login page.
Remember, only authorized personal should have access to this page, block access to anyone other than them.

References

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/05-Enumerate_Infrastructure_and_Application_Admin_Interfaces

< Return to all Vulnerabilities

Crossing Scripts – XSS

Injections. SQL Injections. Cross-site Scripting (hence the amazing title “Crossing Scripts – XSS”). There all sorts of Injection-Based attacks, if you want to read about

The Risks in Web Applications and other scary things…

There are couple of things regarding Risks in Web-Based Applications that you should know, let’s talk about them. When crossing the street, we look at

Enterprise Mobility – BYOD vs. CYOD

We know that “demarcation” of our Enterprise Mobility is very important in the field of Information Security especially when we talk about the devices being

The Dark Web

Let’s talk about the darker and more mysterious side of the internet, also known as The Dark Web. You’ve probably heard about it, whether it’s

Tracing your Requests

Like mentioned here, There are several HTTP request methods, each with its own purpose and uses, In this article we’ll talk about the TRACE Method.

APT vs. ATP

In this article we will talk about APT vs. ATP. In other words, Advanced Persistent Threat and Advanced Threat Protection and the context between these

Admin panel exposed

Description

Recommendation

References

Crossing Scripts – XSS

The Risks in Web Applications and other scary things…

Enterprise Mobility – BYOD vs. CYOD

The Dark Web

Tracing your Requests

APT vs. ATP

Company

Resources

Docs

Latest posts

Possible Credit Card Number Disclosure

Backdoors – A Dangerous Back Entrance

Internal IP Disclosure