Exploit Ruslan Communications <Body>Builder - Authentication Bypass

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21543
Проверка EDB
  1. Пройдено
Автор
ALEXANDER KORCHAGIN
Тип уязвимости
WEBAPPS
Платформа
JAVA
CVE
cve-2002-0951
Дата публикации
2002-06-13
Код:
source: https://www.securityfocus.com/bid/5008/info

Ruslan Communications <Body>Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java.

Reportedly, user input supplied as the login password is not adequately filtered. A malicious user may include special characters in the supplied password and modify the SQL query used to validate the user. Access to the administrative interface is possible. 

Use login='-- and pass='--
 
Источник
www.exploit-db.com

Похожие темы