Xpressions Interactive Multiple SQL Injection Vulnerabilities

ID EDB-ID:22724
Type exploitdb
Reporter Paul Craig
Modified 2003-06-04T00:00:00


Xpressions Interactive Multiple SQL Injection Vulnerabilities. Webapps exploit for asp platform

                                            source: http://www.securityfocus.com/bid/7804/info

Several software products maintained by Xpressions Interactive are prone to SQL injection attacks.

The vulnerability exists in the login.asp page. Specifically, user-supplied input is not sufficiently sanitized of malicious SQL queries.

An attacker may exploit this vulnerability to insert SQL code into requests and have the SQL code executed by the underlying database server. 

User: admin
Pass: ' or '1' = '1