network411 (Product.asp?intProdID) SQL Injection Vulnerability

==============================================================
network411 (Product.asp?intProdID) SQL Injection Vulnerability
==============================================================

Author : Shamus
Location : Solo && Jogjakarta, Indonesia
Web : http://antijasakom.net/forum
Critical Lvl : moderate
Impact : System access
Where : From Remote
---------------------------------------------------------------------------



Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : -
version : -
Vendor : network411
download : -
Description : -
--------------------------------------------------------------------------



Vulnerability:
~~~~~~~~~~~~
-

PoC/Exploit :
~~~~~~~~~~
injection type is integer

http://www.victim.com/Product.asp?intProdID=[Injection query]



Dork:
~~~~~
Google : [think black, you can]

Solution:
~~~~~
- N/A.


Timeline:
~~~~~~~

- 24 - 09 - 2010 bug found
- 26 - 09 - 2010 no vendor contacted
- 27 - 09 - 2010 advisory release
---------------------------------------------------------------------------



Shoutz:
~~~~~~~

oO0::::: Greetz and Thanks: :::::0Oo.
Tuhan YME
My Parents
SPYRO_KiD
K-159
lirva32
newbie_campuz

And Also My LuvLy :
..::.E.Z.R (The deepest Love I'v ever had..).::..



#  0day.today [2018-03-14]  #