Softwebs Nepal Real Estate 'viewphoto.asp' SQL Injection Vulnerability
BID:40927
Info
Softwebs Nepal Real Estate 'viewphoto.asp' SQL Injection Vulnerability
| Bugtraq ID: | 40927 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2010 12:00AM |
| Updated: | Jun 16 2010 12:00AM |
| Credit: | L0rd CrusAd3r |
| Vulnerable: |
Softwebs Nepal Real Estate 3.4 |
| Not Vulnerable: | |
Discussion
Softwebs Nepal Real Estate 'viewphoto.asp' SQL Injection Vulnerability
Softwebs Nepal Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Softwebs Nepal Real Estate 3.4 is vulnerable; other versions may also be affected.
Softwebs Nepal Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Softwebs Nepal Real Estate 3.4 is vulnerable; other versions may also be affected.
Exploit / POC
Softwebs Nepal Real Estate 'viewphoto.asp' SQL Injection Vulnerability
Attackers can exploit this issue with a web browser.
The following example URI is available:
http://www.example.com/viewphoto.asp?id=[sqli]
Attackers can exploit this issue with a web browser.
The following example URI is available:
http://www.example.com/viewphoto.asp?id=[sqli]
References
Softwebs Nepal Real Estate 'viewphoto.asp' SQL Injection Vulnerability
References:
References:
- Real Estate Homepage (Softwebs Nepal)