Bagisto: Default credentials for admin interface

Posted by devsecweb— via Fulldisclosure on Sep 01

Vendor:
Bagisto (https://bagisto.com/)
Affected version:
All
Introduction:
Bagisto is an open source shop system based on PHP and Laravel framework
Vulnerability description:
All Bagisto installations use a default user name (“admin () example com (mailto:admin () example com)”) and password
(“admin123”) until it’s changed manually by the shop administrator.

Proof:…