Xpressions Interactive – Multiple SQL Injections

漏洞ID	1053935	漏洞类型
发布时间	2003-06-04	更新时间	2003-06-04
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	ASP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22724

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7804/info

Several software products maintained by Xpressions Interactive are prone to SQL injection attacks.

The vulnerability exists in the login.asp page. Specifically, user-supplied input is not sufficiently sanitized of malicious SQL queries.

An attacker may exploit this vulnerability to insert SQL code into requests and have the SQL code executed by the underlying database server. 

http://examplestore.com/manage/login.asp
User: admin
Pass: ' or '1' = '1

相关推荐: Fastraq Mailtraq 1.1.4 – Multiple Path Vulnerabilities

Fastraq Mailtraq 1.1.4 – Multiple Path Vulnerabilities 漏洞ID 1053442 漏洞类型发布时间 2000-03-22 更新时间 2000-03-22 CVE编号 N/A CNNVD-ID N/A 漏洞…