SOOP Portal Raven 1.0b SQL Injection defects and repair

# Exploit Title: SOOP Portal Raven 1.0b SQL injection

# Google Dork: Powered by SOOP Portal Raven 1.0b

# Date: [date]

# Author: edevil-Thinker

# Version: Raven 1.0b

# Tested on: Windows

# Soft shortie: ASP.net

Exploit Details:

----------------------------------------------------------------

1-Register On the Target

2-Browse This Link:/forum/pm_show_message.asp? ID = "its a message on Your Inbox"

3-Poc: www.2cto.com//forum/pm_show_message.asp? ID = (inject here)

----------------------------------------------------------------

* ***** SSMM T34M ******

Greatz: Zakacinho, micel, and all SSMM Members

* ***** SSMM T34M ******

 

Fixed: filter the page id parameters.