Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: CMS / Portals :: bu-1347.htm

Sheedravi CMS SQL Injection Vulnerability



Sheedravi CMS SQL Injection Vulnerability
Sheedravi CMS SQL Injection Vulnerability



                 
================= IUT-CERT ================
Title: Sheedravi CMS SQL Injection Vulnerability

Vendor: www.sheedravi.com 

Dork: Design by Sheed Graphic Co
Type: Input.Validation.Vulnerability (SQL Injection)

Fix: N/A

================== nsec.ir ================
Description:

------------------

Sheedravi is a CMS producer in Iran. /template1/advancedsearch.aspx page in Sheedravi CMS

product are vulnerable to SQL Injection vulnerability.

Vulnerability Variant:

------------------
Injection "/template1/advancedsearch.aspx.aspx" in "txtAdvancedkeyword" POST parameter
value:' or 1=1;--
      '
      

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH