• info
• discussion
• exploit
• solution
• references

SiteXpress E-Commerce System Dept.ASP SQL Injection Vulnerability

Attackers can exploit this issue via a web client.

An example URI is as follows:

http://www.example.com/[path]/dept.asp?id=[SQL]