Lucene search
K

Plum CMS Blind SQL Injection

🗓️ 11 Nov 2011 00:00:00Reported by baltazarType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 20 Views

Plum CMS Blind SQL Injection vulnerability in publikacije.php, katalog.php, strana.php, reference.php, galerija.php, and index.php. Default admin logins for mika and guja

Code
`# Coder : baltazar a.k.a b4ltazar < [email protected]>  
#  
# CMS name : Plum CMS  
# Site : http://www.plum-design.net && http://www.plum.rs  
#  
# Dork : Powered by PlumDesign  
# : Powered by PlumDesign site:.rs   
# : Powered by PlumDesign site:.com  
#  
# Admin panel : N/A  
#  
# Vulnerability : Sites design with Plum CMS suffers from blind SQL injection  
#  
# Vuln parameters : publikacije.php?publCatID=[blind]  
# : katalog.php?catID=[blind]  
# : strana.php?pID=[blind]  
# : reference.php?cID=[blind]  
# : katalog.php?prodID=[blind]  
# : galerija.php?albumID=[blind]  
# : index.php?publ_aricleID=[blind]  
#   
# Table : cms_user  
# Columns : username, password  
#   
# Default admin logins :  
# User : mika : 51fabd9de617b73d0c105c7511bdc03f and cfee398643cbc3dc5eefc89334cacdc1   
# : guja : 70f94bafc8dadfb9e4898dd93aab6ef6   
#   
#   
# Special greetz to my friend sinner_01  
# greetz for d3hydr8, qk, marezzi, fx0, TraXdata, v0da, MikiSoft, Soul and all members of ex darkc0de.com, ljuska.org and x0rg.org  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation