Exploit DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection

[Exploiter]

EDB-ID

25483

Проверка EDB

1. Пройдено

Автор

DCRAB

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2005-1236

Дата публикации

2005-04-20

source: https://www.securityfocus.com/bid/13288/info
 
DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
These vulnerabilities are reported to affect DUportal/DUportal SQL 3.1.2; earlier versions may also be affected. 

http://www.example.com/test_DUportal/includes/inc_poll_voting.asp?DAT_PARENT='SQL_INJECTION&DAT_CATEGORY=254&CHA_ID=15&CHA_NAME=Polls&DAT_ID=112