Description
SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.
References
- 1623 exploit
- 19441 third-party-advisory
- ADV-2006-1164 vdb-entry
- 17309 vdb-entry
- 24256 vdb-entry
- ezaspsite-default-sql-injection(25544) vdb-entry
- 20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. mailing-list
- 20060329 EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. mailing-list
- http://www.nukedx.com/?viewdoc=22