MSSQLi Vulnerability

vendor:

AutoDealer

by:

Sid3^effects aKa HaRi

8,8

CVSS

HIGH

MSSQLi

CWE

Product Name: AutoDealer

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

AutoDealer is an application ideal for the small or independent new or used car dealer who needs a way to display and update their inventory online. Backend by Access database, AutoDealer can store thousands of vehicles in categories with images. The exploit is present in two versions, Ver.1 http://server/Auto1/type.asp?iType=[ur injection code] and Ver.2 http://server/auto2/auto2/detail.asp?iPro=[ur injection code]

Mitigation:

Input validation and sanitization should be done to prevent SQL injection attacks.

Source

Exploit-DB raw data:

# vendor :http://www.aspsiteware.com/Auto.asp
# Date: 30 apr,2010
# Dork:Copyright © 2010 ASP SiteWare. All rights reserved.
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
AutoDealer is an application ideal for the small or independent new or used car dealer who needs a way

to display and update their inventory online. Backend by Access database, AutoDealer  can store

thousands of vehicles in categories with images.

############################################################################

Xploit : MSSQLi Vulnerability

       
 Ver.1
 http://server/Auto1/type.asp?iType=[ur injection code]
 
 Ver.2
 http://server/auto2/auto2/detail.asp?iPro=[ur injection code]

############################################################################


#Sid3^effects