Lucene search
K

I-Net MLM Script Engine - SQL Injection

🗓️ 27 Jun 2010 00:00:00Reported by Sid3^effectsType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 39 Views

I-Net MLM Script Engine SQL Injection vuln bypasses authenticatio

Code
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
Vendor Url : http://www.i-netsolution.com/
Google Dork: inurl:/jobsearchengine/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################

Description:
  	I-Net MLM is Complete, Automated Software for MLM Business ( Direct Marketing Software ) Our most comprehensive MLM software, "I-Net MLM" provides the functionality needed to tackle even the most challenging MLM issues.This Customized MLM Software plays vital role in the success of MLM Organization. It proves to be an important parameter for building confidence of company's new associates on the management

#######################################################################################################

Xploit: SQLi VUlnerability


The I-net MLM script has auth bypass vuln 
by using ' or 1=1 or ''=' in both username and password the attacker can get the access 


###############################################################################################################
# 0day no more 
# Sid3^effects 

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation