Home of MCLogin System - Authentication Bypass

Author: L0rd CrusAd3r
type: webapps
platform: php
port: 
date_added: 2010-06-07 
date_updated:  
verified: 1 
codes: CVE-2010-5000;OSVDB-65255 
tags: 
aliases:  
screenshot_url:  
application_url: 

Author: L0rd CrusAd3r
Published: 2010-06-08
Vendor url:-/www.maniacomputer.com
################################################################################################

Authentication Bypass in Home of MCLogin System
1,1
######################################Author:L0rd
CrusAd3r######################################

Description:-

With MCLogin System your visitors can login or register a new account. It is
written in PHP and the data is stored in a MySql database.Very easy to
install or to customize to meet your needs. You can add it to your pages
with just one link.

###################################################################################################

Vulnerability:-

*Authentication Bypass found

The Provided Script as Sqli Vulnerability in Admin Login page

DEMO : http://server/login/login_index.php

Use the string a' or '1'='1 for Username and Password to gain access.

######################################################################################################


Greetz to:MaYur,Sid3^effects

--
With R3gards,
L0rd ÇrusAdêr