AutoDealer 1.0/2.0 – MSSQL Injection - 体验盒子

作者： Sid3^effects

日期： 2010-04-30

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/12462/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

# vendor :http://www.aspsiteware.com/Auto.asp

# Date: 30 apr,2010

--------------------------------------------------------------------------------------

#####################Sid3^effects aKa HaRi##################################

#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]

#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR

#ShouTZ:kedar,dec0d3r,41.w4r10r

#Catch us at www.andhrahackers.com or www.teamicw.in

############################################################################

Description :

AutoDealer is an application ideal for the small or independent new or used car dealer who needs a way

to display and update their inventory online. Backend by Access database, AutoDealercan store

thousands of vehicles in categories with images.

############################################################################

Xploit : MSSQLi Vulnerability

Ver.1

http://server/Auto1/type.asp?iType=[ur injection code]

Ver.2

http://server/auto2/auto2/detail.asp?iPro=[ur injection code]

############################################################################

#Sid3^effects