[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Link Exchange Lite [injection sql]

vendor site: http://softacid.net/
product:Link Exchange Lite
bug: injection sql
risk : high 


injection sql (post) :
/search.asp
post your sql query into the search engine field


injection sql (get):
/linkslist.asp?psearch='[sql]



laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: suppressed

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.