T-Dreams Cars Ads Package 2.0 – SQL Injection

• Exploit Database
• 84 阅读

• 作者： R4dc0re
  日期： 2010-12-04
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/15677/

• # Author: R4dc0re
  # Exploit Title: T-Dreams Cars Ads Package SQL injection Vulnerability
  # Date: 04-12-2010
  # Vendor or Software Link:http://t-dreams.com
  # Category:WebApp
  #Version:2.0
  #Price:31$
  #Contact: R4dc0re@yahoo.fr
  #Website: www.1337db.com
  #Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 
  
  Submit Your Exploit at Submit@1337db.com
  
  ########################################################################################
  [Product Detail]
  
  . JPhotos Upload to Database
  
  . Up to 3 images per ad
  
  . Car Makers & Car Models Categories
  
  . Secure Members Area
  
  . Member places many ads
  
  . Web Based Administrating Area
  
  . Easy to register Forms
  
  . Information & Users Privacy
  
  . Easy to merge with existing sites
  
  . MS Access Included
  
  . SQL Upgrading is enabled
  
  . Open Source Code
  
  [Vulnerability]
  
  SQL Injection:
  
  http://server/processview.asp?key=[Code]
  ########################################################################################
  

  Git

  Copy