ASPSiteware Gallery 1.0 SQL Injection

2010.12.05
Credit: R4dc0re
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89

# Author: R4dc0re # Exploit Title: ASPSiteware Gallery SQL injection Vulnerability # Date: 04-12-2010 # Vendor or Software Link: www.aspsiteware.com # Category:WebApp #Demo Link:http://www.aspsiteware.com/Gallery/ #Version:1.0 #Price:50$ #Contact: R4dc0re@yahoo.fr #Website: www.1337db.com #Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Your Exploit at Submit@1337db.com ################################################################### [Product Detail] ASP Gallery is a web based image gallery application. Backend by Access database, ASP Gallery can store thousands of images in categories. Each image is displayed with name and description. You can customize ASP Gallery for the look and feel of your website. ASP Gallery is an excellent add-on application for your web site. It is designed to be a complete ready-to-use image listing.You just add your images. Start posting your images online and attracting more customers to your site by using this application. [Vulnerability] SQL Injection: http://www.aspsiteware.com/Gallery/type.asp?iType=[Code] ###################################################################


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top