bugtraq - Dora Emlak Script v1.0 (tr) Admin Login ByPass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070730191348.2892.qmail@securityfocus.com>
Date: 30 Jul 2007 19:13:48 -0000
From: ilkerkandemir@...et.com
To: bugtraq@...urityfocus.com
Subject: Dora Emlak Script v1.0 (tr) Admin Login ByPass

# Dora Emlak Script v1.0 (tr) Admin Login ByPass

# ilker kandemir <ilkerkandemir[at]mynet.com>

# Download: http://aspindir.com/goster/5027

# TnX.: Ajann, Dumenci, H0tTurk, Str0ke

# # # # # # # # # # # # # # # # # # # # # # # # # 

# Bug in ../dora/administartor/yonetim/patron/default.asp

<%
cookFirstLevel = Session("FirstLevelSecurity") 'Ilk Güvenlik Session
cookSecondLevel = Session("SecondLevelSecurity") 'Ikinci Güvenlik Session
queryProc = Request.QueryString("Proc") 'Querystring Tanimi
strPageURL = Replace("/" & Request.ServerVariables("URL"),"//","/") 'Bu Sayfa Adresi
strFirstPass = "sifre1"
strSecondPass = "sifre2"
If fixWord(queryProc) = "" Then 'Eger Query Bos Ise (Normal Sayfa Acilisiysa)
If cookFirstLevel <> 1 and cookSecondLevel <> 1 Then 'Eger 1. ve 2. Seviye Sessionlar 1den Farkliysa
%>

# # # # # # # # # # # # # # # # # # # # # # # # # 

# Admin Login Panel: /administartor/yonetim/patron/admin.asp

# First Login Pass: sifre1

# Second Login Pass: sifre2

# # # # # # # # # # # # # # # # # # # # # # # # #