Home / exploits Code Widgets Web Based Help System SQL Injection
Posted on 17 August 2011
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : 1337day.com 0 1 inj3ct0r 1337 Day Team 1 0 0 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com] Exploit Title:Code Widget Web based Help System Web-App (ASP)SQL injection Vulnerability Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=21 Published: 17-August-2011 Greetz to:r0073r (1337day.com), r4dc0re, Sid3^effects,See Me, Awesomeness, Sonic Bluehat. Special Greetz: inj3ct0r Team Shoutzz:- To all My hacker friends Price:40$ PS: This is not the cost of the Exploit but Cost of the Product..Information for n00bs alone ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~* Description: Online Help system (database driven) All content stored in Microsoft® Access Database, can be upsized to Microsoft® SQL Server Can be run on PWS or IIS ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~* Vulnerability: *SQl injection Vulnerability DEMO URL:http://www.codewidgets.net/CS0021/help.asp?key=6' [sqli] # 0day n0 m0re # # L0rd CrusAd3r #
