Shadow infosystem CMS SQL Injection

2012-09-08T00:00:00
ID PACKETSTORM:116366
Type packetstorm
Reporter Crim3R
Modified 2012-09-08T00:00:00

Description

                                        
                                            `<!--  
  
________ .__ __________________   
\_ ___ \_______|__| _____ \_____ \______ \   
/ \ \/\_ __ \ |/ \ _(__ <| _/   
\ \____| | \/ | Y Y \/ \ | \   
\______ /|__| |__|__|_| /______ /____|_ /   
\/ \/ \/ \/   
M3Mb3R OF AjaxTm   
-->  
############################################################################  
# Exploit Title: Shadow infosystem CMS sql injection  
# Google Dork: "Powerd by Shadow infosystem"  
# Date: 9/7/2012  
# Author: Ajax Security Team  
# Discovered By: Crim3R  
# Home: WwW.AjaxTm.CoM  
# Vendor Software: http://www.shadowinfosystem.com/  
# Version: All Version  
# Category:: webapps  
# Tested on: GNU/Linux Ubuntu - Windows Server - win7  
############################################################################  
==================================  
  
[+] id parametr in eventdetails.php is Vulnerable to sqli   
  
D3m0:  
  
http://meridiannursing.com/eventdetails.php?id=8  
  
===============Crim3R@Att.Net=========  
  
[+] Greetz to All Ajaxtm Security Member  
  
Cair3x - HUrr!c4nE - E2MA3N - S3Ri0uS - iM4n - Sc0rpion - Daniyal  
devilzc0der - Dominator - Hossein.R1369  
`