Hosting Controller 6.1 - Multiple SQL Injections

Author: Soroush Dalili
type: webapps
platform: asp
port: 
date_added: 2005-07-13  
date_updated: 2013-06-05  
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 25981.txt  

source: https://www.securityfocus.com/bid/14258/info

Hosting Controller is prone to an SQL injection vulnerability.

This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query.

One may input this string into the search box on the affected pages:

'or'1'='1'or'1'='1