SePortal 2.5 - SQL Injection (1)



EKU-ID: 24040 CVE: OSVDB-77591 OSVDB-ID:
Author: Don Published: 2011-12-09 Verified: Not Verified
Download:

Rating

☆☆☆☆☆
Home


############################################################################
# Exploit Title: SePortal 2.5 SQL Injection
# Google Dork: Powered by SePortal 2.5
# Date: Decembar/08/2011
# Author: Don (BalcanCrew & BalcanHack)
# Software Link: http://seportal.org
# Version: 2.5
# Tested on: LiteSpeed
############################################################################

Vulnerability:
http://server/redirect.php?action=banner&goto= (SQL)

How to fix this vulnerability:
Filter metacharacters from user input.

~Don 2011