Sum Technologies SQL Injection

2014.07.23
Credit: Th3 R0cksT3r
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89
Dork: intext:\"Powered by Sum Technologies\"

# Exploit Author:Th3 R0cksT3r # Exploit Title: Sum Technologies (id) SQL Injection Vulnerability # Email: th3rockst3r@gmail.com # Vendor Homepage: http://www.sumtechnologies.com/ # Google Dork: intext:"Powered by Sum Technologies" Proof Of Concept: 1. https://server/elf_erecting.php?id=[SQL Injection] 2. http://server/index.php?do=view_model&id=[SQL Injection] 3. http://server/about.php?id=[SQL Injection] # Greetz:Bangladesh Black HAT Hackers


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top