CVE-2006-2731: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a emesajyas.asp, b edihaber.asp, and c haberdevam.asp; 2 hid parameter in d yazdir.asp and e yorum.asp, and the 3 e parameter in f arsiv.asp...

CilemNews System 1.1 - yazdir.asp haber_id SQL Injection

CilemNews System 1.1 - yazdir.asp haberid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140...

CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection

!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages... use IO::Socket; if@ARGV + + Example: cilem.pl sux.c...

CVE-2006-0961: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haberid parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name...