Million Dollar Text Links
      Authentication bypass
   ===========================




 APP SUMMARY
 ____________

 Now that the market is overcrowded with million  dollar graphic
 pages where the users get links back to their site, here is how
 you can add your  "twist"  to encash the million  dollar craze.
 Use  this  script  to  generate adsense revenue,  promote  your
 links, get backward links to your site or simply to manage your
 link exchange.



 IMPACT
 _______

 Leads to full administration rights of the admin panel. 



 VERSIONS
 _________

 Vulnerable systems: All versions

 Immune systems: None
 
 
 
 DESCRIPTION #1
 ______________
 
 No authentication checks on the admin home page allows anyone to
 just browse to the admin contol panel and bypass the login
 procedure.  


 Proof of Concept:  
   -> http://www.kalptarudemos.com/demo/million/admin.home.php

 Fix: 
   -> None given. 
    
    

 ADDITIONAL INFO
 _______________
 
 
 Vendor URL         - http://www.cmsnx.com/product.about.php?id=12
 Underlying OS      - Linux (Any), UNIX (Any), Windows (Any)
 Credit             - Jay Scott <jay@jayscott.co.uk
 Message History    - Vendor Contacted. 
                      No reply after 30 days