SOOP Portal Raven 1.0b - SQL Injection

Author: Evil-Thinker
type: webapps
platform: asp
port: 
date_added: 2011-04-29 
date_updated: 2011-04-29 
verified: 0 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: SOOP Portal Raven 1.0b sql injection
# Google Dork: Powered by SOOP Portal Raven 1.0b
# Date: [date]
# Author: Evil-Thinker
# Version: Raven 1.0b
# Tested on: Windows
# Soft Technologie : ASP.net

Exploit Details :
----------------------------------------------------------------
1- Register On the Target

2- Browse This Link : /forum/pm_show_message.asp?ID=  "it's a message on Your Inbox"

3- Poc: www.site.com//forum/pm_show_message.asp?ID=(inject here)
----------------------------------------------------------------

****** SSMM T34M ******
Greatz : Zakacinho , Michel , and all SSMM Members
****** SSMM T34M ******