ASPPortal 4.0.0 - 'default1.asp' SQL Injection

exploit1.asp 'Using : Write Target and ID after Submit Click 'Using : Tr:Alýnan Sifreyi Perl scriptinde cözün. 'Using : Tr:Scriptin Tr Dilinde bu exploitle bilgileri alamassiniz,manuel cekebilirsiniz 'Using : Tr:Kimsenin boyle yapicak kadar seviyesiz oldunu düsünmüyorum...

CVE-2006-1353

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

CVE-2006-1353

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...