Lucene search
megamallSQL.txt
Vendor site: http://products.kaonsoftwares.com/ - Mega-mall ASP product with high risk injection SQL & full path disclosure vulnerability. Beware of SQL injection in product_review.php and order-track.ph
Show more
`vendor site: http://products.kaonsoftwares.com/
product: mega-mall
bug:injection sql & full path disclosure
language: asp
risk: high
injection sql (get):
http://site.com/mega-mall/product_review.php?t=[sql]
http://site.com/mega-mall/product_review.php?t=0&productId=[sql]
http://site.com/mega-mall/product_review.php?t=0&productId=1004&sk=[sql]
http://site.com/mega-mall/product_review.php?t=0&productId=1004&t=0&x=[sql]
http://site.com/mega-mall/product_review.php?t=0&productId=1004&sk=USERID&so=[sql]
injection sql (post) :
http://site.com/mega-mall/order-track.php
Variables:
/mega-mall/order-track.php?Enter=1&orderNo=[sql]
full path dislosure:
http://site.com/mega-mall/product_review.php?t=0&productId=1004&t=0&x[]=
laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: [email protected]
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Nov 2006 00:00Current
7.4High risk
Vulners AI Score7.4