SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action.
https://www.exploit-db.com/exploits/4486
https://exchange.xforce.ibmcloud.com/vulnerabilities/36971
http://www.securityfocus.com/bid/25934