CVE-2007-6140

CVE-2007-6140 affects Dora Emlak 2.0. The vulnerability is due to SQL injection in multiple parameters: id (emlak_detay.asp, haber_detay.asp), kategori (kategorisirala.asp), and tip (tipsirala.asp). This allows remote attackers to execute arbitrary SQL commands. Connected documents confirm affect...

dora-sql.txt

Dora Emlak Script v2.0 SQL Injection Vulnerability Software: Dora Emlak Script v2.0 Download: not free 300 YTL Sales: http://www.aspindir.com/goster/5027 Demo: http://www.doraittifaki.com/dorav2/ Found By: GeFORC3 | G3 Exploit: http://www.example.com/dorav2/emlakdetay.asp?id= SQL...

Dora Emlak Script v1.0 (tr) Admin Login ByPass

Dora Emlak Script v1.0 tr Admin Login ByPass ilker kandemir ilkerkandemiratmynet.com Download: http://aspindir.com/goster/5027 TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug in ../dora/administartor/yonetim/patron/default.asp cookFirstLevel = Session"FirstLevelSecurity" 'Ilk Gьvenlik Session...

dora-bypass.txt

Dora Emlak Script v1.0 tr Admin Login ByPass ilker kandemir Download: http://aspindir.com/goster/5027 TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug in ../dora/administartor/yonetim/patron/default.asp 1 and cookSecondLevel 1 Then 'Eger 1. ve 2. Seviye Sessionlar 1den Farkliysa % Admin Login Panel:...

Sql injection

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3990

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3990

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3989

CVE-2007-3989 describes multiple reflected XSS vulnerabilities in the Dora Emlak 1.0 web app, specifically in default.asp when goster is set to iletisim. The vulnerabilities allow injection of arbitrary script/HTML via the Adiniz and Soyadiniz parameters (and possibly other vectors). Affected com...

CVE-2007-3989

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

CVE-2007-3990

CVE-2007-3990 describes an SQL injection vulnerability in Dora Emlak 1.0, triggered when goster is set to emlakdetay and an arbitrary id parameter is supplied to default.asp. The root cause is unsafely constructed SQL queries, allowing remote attackers to execute arbitrary SQL commands. No exploi...

doraemlak-xsssql.txt

Dora Emlak Script v1.0 XSS & sql injection Vulnerability. Software: Dora Emlak Script v1.0 download: http://www.aspindir.com/goster/5027 demo: http://www.fatihkaratas.info/dora/ Found By: GeFORC3 G3 Exploit: 1-http://www.example.com/dora/default.asp?goster=iletisim You write xss code in page's te...

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25004/info Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker ...