Beginner Bug Bounty Hunters: PhpMyAdmin Setup page Access Vulnerability 2023

[@rajeshsagar3912]

thanq for awesome videos, using nmap as a vulnerability scanner also gives us an easy win sometimes, like adding --script=vuln in the nmap command

[@THEBBH]

🙏

[@VEGETApepe]

❤❤❤❤❤❤❤❤❤❤

[@studyrelaxwithme4564]

And now? You can t do nothing in the setup if you are not logged in. Everything you do will reset after exit the page

[@THEBBH]

Try to find endpoints where i can do something or find something interesting.

[@studyrelaxwithme4564]

@@THEBBH cool, can you do an example video?

[@THEBBH]

Yup sure

[@learn-with-noob-007]

Show us how to exploit this 😊

[@learn-with-noob-007]

But I got in so many domains but some of them rejected said that's not vulnerability😢

[@THEBBH]

Do some RCE on them.

[@learn-with-noob-007]

@@THEBBH but where to set the rce code I have no idea here

[@AyushKumar-hv2ww]

Impact

[@Sandy_98]

Any bounty for this

[@THEBBH]

Till now Nope But Reported. I Hope Soon

[@Sandy_98]

​@@THEBBH ok bro but is it right to publish the poc without their permission