Lucene search

fc_sql.txt

🗓️ 04 Aug 2008 00:00:00Reported by TosserType

packetstorm🔗 packetstormsecurity.com👁 15 Views

The Facility Composer Website at ff.cecer.army.mil/fc suffers from an SQL Injection vulnerability. To exploit, go to https://ff.cecer.army.mil/fc/login.jsp and input ' or 'x'='x in the username and password fields to gain Administrator privileges

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`# Title : Facility Composer Website SQL Injection  
  
# Description : The Facility Composer Website at ff.cecer.army.mil/fc/  
suffers from an SQL Injection vulnerability.  
  
# Author : Tosser  
  
# E-mail : [email protected]  
  
# Proof : Go to  
https://ff.cecer.army.mil/fc/login.jsp  
and type something like ' or 'x'='x in the username and password fields.  
This will grant you Administrator privileges on the system.`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Aug 2008 00:00Current

7.4High risk

Vulners AI Score7.4