Adobe connect 10 username disclosure Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2021-02-09 | Type : webapps | Platform : multiple
This exploit / vulnerability Adobe connect 10 username disclosure is for educational purposes only and if it is used you will do on your own risk!


[+] Code ...

# Title: Adobe Connect 10 - Username Disclosure
# Author: h4shur
# date:2021-02-07
# Vendor Homepage: https://www.adobe.com
# Software Link: https://www.adobe.com/products/adobeconnect.html
# Version: 10 and earlier
# Tested on: Windows 10 & Google Chrome
# Category : Web Application Bugs

### Description :

By adding this (/system/help/support) to the end of the desired website address, you can view the username without any filter or obstacle. Sometimes even without a username and password. And by adding (/system/login) to the end of the desired website address, you can access the admin panel without any filters.

### POC :
site.com/system/help/support

### Admin Panel :
site.com/system/login