header-logo
Suggest Exploit
vendor:
Alibaba Clone Tritanium Version
by:
IRAQ_JAGUAR
9,3
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Alibaba Clone Tritanium Version
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:ec21clone:alibaba_clone_tritanium_version
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2013

Alibaba Clone Tritanium Version (news_desc.html) Sql Injection Vulnerability

A SQL injection vulnerability exists in Alibaba Clone Tritanium Version, which allows an attacker to execute arbitrary SQL commands via the 'id' parameter in the 'news_desc.html' script. An attacker can exploit this vulnerability to gain access to sensitive information in the back-end database.

Mitigation:

Upgrade to the latest version of Alibaba Clone Tritanium Version
Source

Exploit-DB raw data:

#--------------------------------------------------------
#Alibaba Clone Tritanium Version  (news_desc.html)  Sql Injection Vulnerability
#--------------------------------------------------------
#Date 15-08-2013
#
#--------------------------------------------------------
#Discovered By: IRAQ_JAGUAR
#
#
#Mail: iraq_jaguar@yahoo.com      
#-------------------------------------------------------
#
#Script:   Alibaba Clone Tritanium Version
#
#Script Home Page:  http://www.ec21clone.com/products.php
#
#--------------------------------------------------------
#Poc/Exploit:
#
#
#http://www.target.com/[path]/news_desc.html?id=6'
#
#
#Greetz To : v4-team.com

Navigation

Suggest Exploit

Services By CQR