EUVD-2007-4098

Malware in sbrugna...

SuskunDuygular Sistemi Unuttum.ASP SQL注入漏洞

Sistemi是一款ASP的WEB应用程序。 Sistemi不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Unuttum.ASP'脚本对用户提交的密码参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 SuskunDuygular Sistemi 0.1 目前没有解决方案提供： http://www.suskunduygular.gen.tr/...

CVE-2007-4114

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4114

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4114

CVE-2007-4114 affects SuskunDuygular Uyelik Sistemi 1.2, where the unuttum.asp page is vulnerable to SQL injection through the kadi and email parameters. The issue allows remote attackers to induce arbitrary SQL commands, as indicated by multiple SQL injection vulnerabilities in the vulnerable pa...

suskunduygular-sql.txt

Olmek Var$a Kaderde Dert Ekleme Derdine Team : Portal:SuskunDuygular - Üyelik Sistemi v.1 Sql İnjection Bug Author:Yollubunlar http://yollubunlar.org Exploit:site.com/scriptpath/unuttum.asp ' OR '1'='1 ' OR '1'='1 2 wirte enter then we see our priv question than we write to ' OR '1'='1 then we se...