CVE-2007-5783

CVE-2007-5783 describes an SQL injection in emc.asp of emagiC CMS.Net 4.0, exploitable via the pageId parameter to allow remote execution of arbitrary SQL commands. CVSSv2 data indicates a network attack vector with low complexity, requiring no authentication, and potential partial impact on conf...

emagiC CMS.Net EMC.ASP SQL注入漏洞

emagiC CMS.Net是一款基于ASP的WEB应用程序。 emagiC CMS.Net不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'EMC.ASP'脚本对用户提交的'pageId'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 emagiC CMS.Net 4.0 目前没有详细解决方案提供： http://www.emagic-cms.com/ http://www.example.com/emc.asp?pageId=1' UNION SELECT TOP ...

emagiC CMS.Net 4.0 (emc.asp) Remote SQL Injection Vulnerability

No description provided by source. -------------------- emagiC CMS.Net v4.0 Remote SQL Injection Exploit -------------------- + Found : hak3r-b0y + Gr33tz : darko , V4 CrackerS , hackeralQassam , Ans , Barra, all ans-hacker.com members + Script URL : http://www.emagic-cms.com/ + D0rk :...

emagic-sql.txt

-------------------- emagiC CMS.Net v4.0 Remote SQL Injection Exploit -------------------- + Found : hak3r-b0y + Gr33tz : darko , V4 CrackerS , hackeralQassam , Ans , Barra, all ans-hacker.com members + Script URL : http://www.emagic-cms.com/ + D0rk : inurl:emc.asp?pageid= --------------------...

emagiC CMS.Net 4.0 (emc.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== emagiC CMS.Net 4.0 emc.asp Remote SQL Injection Vulnerability =============================================================== -------------------- emagiC CMS.Net v4.0 Remote S...

emagiC CMS.Net 4.0 - emc.asp SQL Injection

emagiC CMS.Net 4.0 - emc.asp SQL Injection -------------------- emagiC CMS.Net v4.0 Remote SQL Injection Exploit -------------------- + Found : hak3r-b0y + Gr33tz : darko , V4 CrackerS , hackeralQassam , Ans , Barra, all ans-hacker.com members + Script URL : http://www.emagic-cms.com/ + D0rk :...

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

-------------------- emagiC CMS.Net v4.0 Remote SQL Injection Exploit -------------------- + Found : hak3r-b0y + Gr33tz : darko , V4 CrackerS , hackeralQassam , Ans , Barra, all ans-hacker.com members + Script URL : http://www.emagic-cms.com/ + D0rk : inurl:emc.asp?pageid= --------------------...