ASPSiteware ASP Gallery 1.0 SQL Injection

2010-12-04 09:16:35

# Author: R4dc0re
# Exploit Title: ASPSiteware Gallery SQL injection Vulnerability
# Date: 04-12-2010
# Vendor or Software Link: www.aspsiteware.com
# Category:WebApp
#Demo Link:http://www.aspsiteware.com/Gallery/
#Version:1.0
#Price:50$
#Contact: [email protected]
#Website: www.1337db.com
#Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members

Submit Your Exploit at [email protected]

###################################################################
[Product Detail]

ASP Gallery is a web based image gallery application.
Backend by Access database, ASP Gallery can store thousands of images in categories.
Each image is displayed with name and description.
You can customize ASP Gallery for the look and feel of your website.
ASP Gallery is an excellent add-on application for your web site.
It is designed to be a complete ready-to-use image listing.You just add your images.
Start posting your images online and attracting more customers to your site by using this application.

[Vulnerability]

SQL Injection:

http://server/Gallery/type.asp?iType=[Code]
###################################################################

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.