Texas Rankem player.asp selPlayer Variable SQL Injection

2006-11-18T00:04:47
ID OSVDB:31570
Type osvdb
Reporter OSVDB
Modified 2006-11-18T00:04:47

Description

Manual Testing Notes

http://[target]/path/player.asp?player_id=14&selPlayer=[SQL INJECTION]

References:

Vendor URL: http://texasrankem.com/ Related OSVDB ID: 31571 Other Advisory URL: http://www.aria-security.com/forum/showthread.php?t=34 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-11/0352.html ISS X-Force ID: 30384 CVE-2006-6050 Bugtraq ID: 21168