JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit
Type :
SQL Injection
Release Date :
{2007-03-13}
Product / Vendor :
JGBBS Is a Tree-style Online Forum System
http://sourceforge.net/projects/jgbbs/
Bug :
http://localhost/script/search.asp?author=-SQL Inj.-&bid=0
SQL Injection Exploit :
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit
UniquE-Key{UniquE-Cracker}
UniquE@UniquE-Key.ORG
http://UniquE-Key.ORG
Tested :
JGBBS 3.0beta1
Vulnerable :
JGBBS 3.0beta1
Author :
UniquE-Key{UniquE-Cracker}
UniquE(at)UniquE-Key.Org
http://www.UniquE-Key.Org