Description
No description provided by source.
{"lastseen": "2017-11-19T15:44:32", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "poc", "enchantments": {"score": {"value": 0.2, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.2}, "href": "https://www.seebug.org/vuldb/ssvid-69008", "references": [], "enchantments_done": [], "id": "SSV:69008", "title": "VU Mass Mailer Authentication Bypass", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 2, "sourceData": "\n 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0\r\n0 _ __ __ __ 1\r\n1 /' \\ __ /'__`\\ /\\ \\__ /'__`\\ 0\r\n0 /\\_, \\ ___ /\\_\\/\\_\\ \\ \\ ___\\ \\ ,_\\/\\ \\/\\ \\ _ ___ 1\r\n1 \\/_/\\ \\ /' _ `\\ \\/\\ \\/_/_\\_<_ /'___\\ \\ \\/\\ \\ \\ \\ \\/\\`'__\\ 0\r\n0 \\ \\ \\/\\ \\/\\ \\ \\ \\ \\/\\ \\ \\ \\/\\ \\__/\\ \\ \\_\\ \\ \\_\\ \\ \\ \\/ 1\r\n1 \\ \\_\\ \\_\\ \\_\\_\\ \\ \\ \\____/\\ \\____\\\\ \\__\\\\ \\____/\\ \\_\\ 0\r\n0 \\/_/\\/_/\\/_/\\ \\_\\ \\/___/ \\/____/ \\/__/ \\/___/ \\/_/ 1\r\n1 \\ \\____/ >> Exploit database separated by exploit 0\r\n0 \\/___/ type (local, remote, DoS, etc.) 1\r\n1 1\r\n0 [+] Site : Inj3ct0r.com 0\r\n1 [+] Support e-mail : submit[at]inj3ct0r.com 1\r\n0 0\r\n1 ########################################### 1\r\n0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1\r\n1 ########################################### 0\r\n0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1\r\n\r\nAuthor: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]\r\nExploit Title:VU Mass Mailer Authentication Bypass\r\nCode: ASP 3.0 & VBScript\r\nVendor url:http://www.vunet.us\r\nVersion:n/a\r\nPrice:80$\r\nPublished: 2010-06-12\r\nGreetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to\r\nall ICW members.\r\nSpl Greetz to:inj3ct0r.com Team\r\n\r\n#####################################################################################################################################################################################################\r\n\r\nDescription:\r\n\r\nVU Mass Mailer sends mass mail smartly. There is a time interval that\r\nseparates each email from being treated as mass mailing. Emails are stored\r\nin a database provided. You can add, delete, and unsubscribe emails from\r\nyour list. Password protected. Great E-COMMERCE tool for anyone.\r\nRequirements: web server (i.e. your hosted website) that supports ASP,\r\nCDONTS, MS Access (common features on any web server).\r\n\r\n#######################################################################################################################################################################################################\r\n\r\nVulnerability:\r\n\r\n*Authentication Bypass found\r\n\r\nThe Provided Script as Sqli Vulnerability in Admin Login page\r\n\r\n\r\nDEMO URL:\r\n\r\nhttp://[site]/[path]/mailer/\r\n\r\nUse the string a' or '1'='1 for Username and Password to gain access.\r\n\r\n\r\n# 0day n0 m0re #\r\n# L0rd CrusAd3r #\r\n\r\n\r\n-- \r\nWith R3gards,\r\nL0rd CrusAd3r\r\n\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-69008", "type": "seebug", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1647602257}}
{}
VU Mass Mailer Authentication Bypass