New eVuln Advisory: BlogPHP Authentication Bypass http://evuln.com/vulns/34/summary/bt/ --------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (alex@xxxxxxxxx) eVuln ID: EV0034 -----------------Description--------------- Vulnerable scripts: index.php Variable $_POST[username] isn't properly sanitized before being used in a SQL query. Condition: magic_quotes_gpc = off --------------Exploit---------------------- Available at: http://evuln.com/vulns/34/exploit/bt/ --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (alex@xxxxxxxxx)
