Search...

Vanira CMS SQL Injection

2011-09-27T00:00:00

ID PACKETSTORM:105343
Type packetstorm
Reporter kurdish hackers team
Modified 2011-09-27T00:00:00

Description

                                        
                                            `===========================================================  
Vanira-cms Remote SQL insertion Vulnerability   
-----------------------------------------------------------  
foun by :kurdish hackers team  
group : kurd-team  
contact : pshela@yahoo.com  
site : kurdteam.org  
-----------------------------------------------------------  
------------------------script-----------------------------  
-----------------------------------------------------------  
script name: Vanira-cms iran php script   
site home : http://tursweb.com  
price : BY Iran MonY  
-----------------------------------------------------------  
  
Exploit:  
--------  
voteshow.php?vact=ok&vtpidshow=1 [SQL insertion attacks]  
  
live site :  
http://melikaco.ir/voteshow.php?vact=ok&vtpidshow=1  
-----------------------------------------------------------  
Zryan_kurd ,r00t-SyS , all Member cold hackers team(cmg-team.com) , all kurdish hackers  
-----------------------------------------------------------  
================================================================  
`

JSON Vulners Source

Initial Source

{"lastseen": "2016-11-03T10:27:36", "references": [], "description": "", "reporter": "kurdish hackers team", "published": "2011-09-27T00:00:00", "type": "packetstorm", "title": "Vanira CMS SQL Injection", "enchantments": {"score": {"value": 0.7, "vector": "NONE", "modified": "2016-11-03T10:27:36", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:27:36", "rev": 2}, "vulnersScore": 0.7}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2011-09-27T00:00:00", "id": "PACKETSTORM:105343", "href": "https://packetstormsecurity.com/files/105343/Vanira-CMS-SQL-Injection.html", "viewCount": 1, "sourceData": "`=========================================================== \nVanira-cms Remote SQL insertion Vulnerability \n----------------------------------------------------------- \nfoun by :kurdish hackers team \ngroup : kurd-team \ncontact : pshela@yahoo.com \nsite : kurdteam.org \n----------------------------------------------------------- \n------------------------script----------------------------- \n----------------------------------------------------------- \nscript name: Vanira-cms iran php script \nsite home : http://tursweb.com \nprice : BY Iran MonY \n----------------------------------------------------------- \n \nExploit: \n-------- \nvoteshow.php?vact=ok&vtpidshow=1 [SQL insertion attacks] \n \nlive site : \nhttp://melikaco.ir/voteshow.php?vact=ok&vtpidshow=1 \n----------------------------------------------------------- \nZryan_kurd ,r00t-SyS , all Member cold hackers team(cmg-team.com) , all kurdish hackers \n----------------------------------------------------------- \n================================================================ \n`\n", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://packetstormsecurity.com/files/download/105343/vaniracms-sql.txt"}