CVE-2010-1925

tekno.Portal 0.1b - SQL Injection via makale.php id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1925. PoCs published by CoBRa_21.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in tekno.Portal v0.1b via the 'id' parameter in makale.php. The provided URL injects a UNION-based SQL query to extract the database version.

Description

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-2817.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CoBRa_21 · textwebappsphp
https://www.exploit-db.com/exploits/12552

This exploit demonstrates a SQL injection vulnerability in tekno.Portal v0.1b via the 'id' parameter in makale.php. The provided URL injects a UNION-based SQL query to extract the database version.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: tekno.Portal v0.1b
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20464
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1117
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40030
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/12552

Scores

EPSS 0.0100
EPSS Percentile 58.4%

Details

CWE
CWE-89
Status published
Products (1)
rifat_kurban/tekno.portal 0.1b
Published May 12, 2010
Tracked Since Feb 18, 2026