(Lead Capture Page System) Authentication Bypass

(Lead Capture Page System) Authentication Bypass Vulnerability
 
Program: Lead Capture Page System
Developer: http://leadcapturepagesystem.com
Author: ITTIHACK www.2cto.com http://ittihack.com

Overview:
To solve this problem, you can bypass the management login page, perform the following steps:
 
1) Use the dork above to find yours.
2) Go to http://www.bkjia.com/admin
Now you will be redirected to login page: http://www.bkjia.com/admin/login. php, you are required to login, just change the link abve by this:
3) replace login. php with create. php --> http://www.bkjia.com/admin/create. php
4) Fill up the blanks, and Click on: Create Account
5) Now change the URL to: http://www.bkjia.com/admin/account. php
6) That's all, full control XD