Exploit ASPSiteWare Contact Directory 1.0 - SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
15683
Проверка EDB
  1. Пройдено
Автор
R4DC0RE
Тип уязвимости
WEBAPPS
Платформа
ASP
CVE
N/A
Дата публикации
2010-12-04
Код:
# Author: R4dc0re
# Exploit Title: ASPSiteware Contact Directory SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Version:1.0
#Price:40$
#Contact: [email protected]
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 

Submit Your Exploit at [email protected]

########################################################################################
[Product Detail]

Contact Directory is an application that allows you to set up and share contacts online.
Great for a club or organization web site or for personal use.
Backend by Access database, Contact Directory can store thousands of names and contact information
in alphabetical categories.
 
[Vulnerability]

SQL Injection:
http://server/Directory/type.asp?iType=[Code]
########################################################################################
 
Источник
www.exploit-db.com

Похожие темы