• info
• discussion
• exploit
• solution
• references

E-vanced Solutions Summer Re-ader Multiple Input Validation Vulnerabilities

An attacker can exploit these issues via a browser. For the cross-site scripting issues, the attacker must entice an unsuspecting victim into following a malicious URI.

The following sample URI is available:

http://www.example.com/viewreviews.asp?ProgramID=35 union all select lol FROM lol--&CurrPage=2