#Aria-Security Team Advisory # # #Original Advisory : #http://www.aria-security.com/forum/showthread.php?t=41 #----------------------------------------------------------- #Software: ASP ListPics 5.0 #Method: SQL Injection # #PoC: #http://target/path/listpics.asp?a=show&ID=[SQL INJECTION] # #Contact: Advisory@aria-security.net