Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection

2004-03-20T00:00:00
ID EXPLOITPACK:F39E53F47C75105BC1E9D52AA403303A
Type exploitpack
Reporter Manuel Lopez
Modified 2004-03-20T00:00:00

Description

Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection

                                        
                                            source: https://www.securityfocus.com/bid/9931/info
 
It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The problem is reported to exist in the 'ID' parameter contained within the 'resend.asp' and 'news_view.asp' scripts.
 
Member Management System version 2.1 has been reported to be affected by this issue, however, other versions may be vulnerable as well.


http://www.example.com/resend.asp?ID=[SQL query]